./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 278b945680d29bf571e1aaa42d90b0a6b141ce129976e6e0985d57b09f7f9d7c --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:12:14,519 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:12:14,521 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:12:14,588 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:12:14,589 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:12:14,592 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:12:14,594 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:12:14,596 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:12:14,597 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:12:14,601 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:12:14,602 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:12:14,603 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:12:14,603 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:12:14,605 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:12:14,606 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:12:14,609 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:12:14,610 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:12:14,611 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:12:14,617 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:12:14,623 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:12:14,624 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:12:14,637 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:12:14,638 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:12:14,639 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:12:14,645 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:12:14,645 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:12:14,646 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:12:14,648 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:12:14,648 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:12:14,649 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:12:14,649 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:12:14,650 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:12:14,651 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:12:14,652 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:12:14,653 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:12:14,654 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:12:14,654 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:12:14,666 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:12:14,667 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:12:14,668 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:12:14,669 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:12:14,670 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:12:14,717 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:12:14,717 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:12:14,718 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:12:14,718 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:12:14,719 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:12:14,719 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:12:14,719 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:12:14,719 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:12:14,720 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:12:14,720 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:12:14,721 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:12:14,721 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:12:14,721 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:12:14,721 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:12:14,721 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:12:14,721 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:12:14,722 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:12:14,722 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:12:14,722 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:12:14,722 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:12:14,722 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:12:14,723 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:12:14,723 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:12:14,723 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:12:14,723 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:12:14,723 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:12:14,724 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:12:14,724 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:12:14,724 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:12:14,724 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:12:14,724 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:12:14,725 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:12:14,725 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:12:14,725 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 278b945680d29bf571e1aaa42d90b0a6b141ce129976e6e0985d57b09f7f9d7c [2022-02-20 18:12:15,146 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:12:15,175 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:12:15,178 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:12:15,179 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:12:15,179 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:12:15,180 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c [2022-02-20 18:12:15,239 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8f9b9ffb/6c47d03cf888473fa4629c0c9999f4dd/FLAGeda20a033 [2022-02-20 18:12:15,683 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:12:15,684 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c [2022-02-20 18:12:15,697 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8f9b9ffb/6c47d03cf888473fa4629c0c9999f4dd/FLAGeda20a033 [2022-02-20 18:12:16,208 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8f9b9ffb/6c47d03cf888473fa4629c0c9999f4dd [2022-02-20 18:12:16,211 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:12:16,212 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:12:16,214 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:12:16,214 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:12:16,218 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:12:16,219 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,220 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5aa51752 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16, skipping insertion in model container [2022-02-20 18:12:16,221 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,226 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:12:16,287 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:12:16,541 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c[6886,6899] [2022-02-20 18:12:16,627 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:12:16,634 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:12:16,677 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c[6886,6899] [2022-02-20 18:12:16,724 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:12:16,738 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:12:16,739 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16 WrapperNode [2022-02-20 18:12:16,739 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:12:16,740 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:12:16,740 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:12:16,740 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:12:16,745 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,770 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,808 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 262 [2022-02-20 18:12:16,812 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:12:16,812 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:12:16,813 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:12:16,813 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:12:16,818 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,819 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,825 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,825 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,834 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,843 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,848 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,850 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:12:16,852 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:12:16,852 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:12:16,853 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:12:16,854 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (1/1) ... [2022-02-20 18:12:16,859 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:12:16,870 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:16,894 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:12:16,908 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:12:16,939 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:12:16,939 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:12:16,939 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:12:16,939 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:12:16,939 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:12:16,940 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:12:16,940 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:12:16,940 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:16,942 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:16,943 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:12:16,943 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:12:16,943 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:12:16,943 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:12:16,943 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:12:16,943 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:12:16,943 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:12:16,943 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:12:16,943 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:12:17,024 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:12:17,025 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:12:17,312 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:12:17,318 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:12:17,318 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:12:17,320 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:17 BoogieIcfgContainer [2022-02-20 18:12:17,320 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:12:17,321 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:12:17,321 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:12:17,332 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:12:17,333 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:12:16" (1/3) ... [2022-02-20 18:12:17,333 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d35b796 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:12:17, skipping insertion in model container [2022-02-20 18:12:17,333 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:16" (2/3) ... [2022-02-20 18:12:17,334 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d35b796 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:12:17, skipping insertion in model container [2022-02-20 18:12:17,334 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:17" (3/3) ... [2022-02-20 18:12:17,335 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product49.cil.c [2022-02-20 18:12:17,339 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:12:17,339 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:12:17,389 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:12:17,398 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:12:17,398 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:12:17,434 INFO L276 IsEmpty]: Start isEmpty. Operand has 92 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:12:17,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:12:17,443 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:17,444 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:17,444 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:17,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:17,449 INFO L85 PathProgramCache]: Analyzing trace with hash -1747145324, now seen corresponding path program 1 times [2022-02-20 18:12:17,455 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:17,456 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [717343436] [2022-02-20 18:12:17,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:17,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:17,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:12:17,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,687 INFO L290 TraceCheckUtils]: 0: Hoare triple {95#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {95#true} is VALID [2022-02-20 18:12:17,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {95#true} assume true; {95#true} is VALID [2022-02-20 18:12:17,688 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {95#true} {96#false} #243#return; {96#false} is VALID [2022-02-20 18:12:17,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:12:17,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,708 INFO L290 TraceCheckUtils]: 0: Hoare triple {95#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {95#true} is VALID [2022-02-20 18:12:17,708 INFO L290 TraceCheckUtils]: 1: Hoare triple {95#true} assume true; {95#true} is VALID [2022-02-20 18:12:17,709 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {95#true} {96#false} #249#return; {96#false} is VALID [2022-02-20 18:12:17,709 INFO L290 TraceCheckUtils]: 0: Hoare triple {95#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {95#true} is VALID [2022-02-20 18:12:17,710 INFO L290 TraceCheckUtils]: 1: Hoare triple {95#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {95#true} is VALID [2022-02-20 18:12:17,710 INFO L290 TraceCheckUtils]: 2: Hoare triple {95#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {95#true} is VALID [2022-02-20 18:12:17,710 INFO L290 TraceCheckUtils]: 3: Hoare triple {95#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {95#true} is VALID [2022-02-20 18:12:17,710 INFO L290 TraceCheckUtils]: 4: Hoare triple {95#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {95#true} is VALID [2022-02-20 18:12:17,710 INFO L290 TraceCheckUtils]: 5: Hoare triple {95#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {95#true} is VALID [2022-02-20 18:12:17,711 INFO L290 TraceCheckUtils]: 6: Hoare triple {95#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {95#true} is VALID [2022-02-20 18:12:17,711 INFO L290 TraceCheckUtils]: 7: Hoare triple {95#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {95#true} is VALID [2022-02-20 18:12:17,714 INFO L290 TraceCheckUtils]: 8: Hoare triple {95#true} assume !true; {96#false} is VALID [2022-02-20 18:12:17,714 INFO L272 TraceCheckUtils]: 9: Hoare triple {96#false} call cleanup(); {96#false} is VALID [2022-02-20 18:12:17,714 INFO L290 TraceCheckUtils]: 10: Hoare triple {96#false} havoc ~i~0;havoc ~__cil_tmp2~0; {96#false} is VALID [2022-02-20 18:12:17,714 INFO L272 TraceCheckUtils]: 11: Hoare triple {96#false} call timeShift(); {96#false} is VALID [2022-02-20 18:12:17,714 INFO L290 TraceCheckUtils]: 12: Hoare triple {96#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {96#false} is VALID [2022-02-20 18:12:17,715 INFO L272 TraceCheckUtils]: 13: Hoare triple {96#false} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {95#true} is VALID [2022-02-20 18:12:17,715 INFO L290 TraceCheckUtils]: 14: Hoare triple {95#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {95#true} is VALID [2022-02-20 18:12:17,715 INFO L290 TraceCheckUtils]: 15: Hoare triple {95#true} assume true; {95#true} is VALID [2022-02-20 18:12:17,715 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {95#true} {96#false} #243#return; {96#false} is VALID [2022-02-20 18:12:17,715 INFO L290 TraceCheckUtils]: 17: Hoare triple {96#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {96#false} is VALID [2022-02-20 18:12:17,716 INFO L290 TraceCheckUtils]: 18: Hoare triple {96#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {96#false} is VALID [2022-02-20 18:12:17,716 INFO L290 TraceCheckUtils]: 19: Hoare triple {96#false} assume !(0 != ~pumpRunning~0); {96#false} is VALID [2022-02-20 18:12:17,716 INFO L290 TraceCheckUtils]: 20: Hoare triple {96#false} assume !(0 != ~systemActive~0); {96#false} is VALID [2022-02-20 18:12:17,716 INFO L290 TraceCheckUtils]: 21: Hoare triple {96#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {96#false} is VALID [2022-02-20 18:12:17,717 INFO L290 TraceCheckUtils]: 22: Hoare triple {96#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {96#false} is VALID [2022-02-20 18:12:17,717 INFO L290 TraceCheckUtils]: 23: Hoare triple {96#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {96#false} is VALID [2022-02-20 18:12:17,717 INFO L272 TraceCheckUtils]: 24: Hoare triple {96#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {95#true} is VALID [2022-02-20 18:12:17,717 INFO L290 TraceCheckUtils]: 25: Hoare triple {95#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {95#true} is VALID [2022-02-20 18:12:17,717 INFO L290 TraceCheckUtils]: 26: Hoare triple {95#true} assume true; {95#true} is VALID [2022-02-20 18:12:17,718 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {95#true} {96#false} #249#return; {96#false} is VALID [2022-02-20 18:12:17,718 INFO L290 TraceCheckUtils]: 28: Hoare triple {96#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {96#false} is VALID [2022-02-20 18:12:17,718 INFO L290 TraceCheckUtils]: 29: Hoare triple {96#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {96#false} is VALID [2022-02-20 18:12:17,718 INFO L290 TraceCheckUtils]: 30: Hoare triple {96#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {96#false} is VALID [2022-02-20 18:12:17,718 INFO L290 TraceCheckUtils]: 31: Hoare triple {96#false} assume !false; {96#false} is VALID [2022-02-20 18:12:17,719 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:17,721 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:17,721 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [717343436] [2022-02-20 18:12:17,721 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [717343436] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:17,722 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:17,722 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:12:17,723 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1731515625] [2022-02-20 18:12:17,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:17,728 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:12:17,730 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:17,733 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:17,775 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:17,775 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:12:17,775 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:17,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:12:17,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:12:17,808 INFO L87 Difference]: Start difference. First operand has 92 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:18,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,025 INFO L93 Difference]: Finished difference Result 175 states and 238 transitions. [2022-02-20 18:12:18,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:12:18,026 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:12:18,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:18,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:18,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 238 transitions. [2022-02-20 18:12:18,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:18,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 238 transitions. [2022-02-20 18:12:18,093 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 238 transitions. [2022-02-20 18:12:18,417 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 238 edges. 238 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:18,441 INFO L225 Difference]: With dead ends: 175 [2022-02-20 18:12:18,441 INFO L226 Difference]: Without dead ends: 83 [2022-02-20 18:12:18,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:12:18,448 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:18,448 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:18,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-02-20 18:12:18,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2022-02-20 18:12:18,489 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:18,490 INFO L82 GeneralOperation]: Start isEquivalent. First operand 83 states. Second operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,507 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,508 INFO L87 Difference]: Start difference. First operand 83 states. Second operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,518 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2022-02-20 18:12:18,518 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2022-02-20 18:12:18,520 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:18,520 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:18,520 INFO L74 IsIncluded]: Start isIncluded. First operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 83 states. [2022-02-20 18:12:18,521 INFO L87 Difference]: Start difference. First operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 83 states. [2022-02-20 18:12:18,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,548 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2022-02-20 18:12:18,548 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2022-02-20 18:12:18,549 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:18,549 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:18,549 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:18,550 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:18,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 107 transitions. [2022-02-20 18:12:18,557 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 107 transitions. Word has length 32 [2022-02-20 18:12:18,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:18,558 INFO L470 AbstractCegarLoop]: Abstraction has 83 states and 107 transitions. [2022-02-20 18:12:18,558 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:18,558 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2022-02-20 18:12:18,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-02-20 18:12:18,559 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:18,560 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:18,560 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:12:18,560 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:18,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:18,561 INFO L85 PathProgramCache]: Analyzing trace with hash -372618950, now seen corresponding path program 1 times [2022-02-20 18:12:18,561 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:18,561 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1179879904] [2022-02-20 18:12:18,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:18,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:18,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:18,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,639 INFO L290 TraceCheckUtils]: 0: Hoare triple {644#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {644#true} is VALID [2022-02-20 18:12:18,640 INFO L290 TraceCheckUtils]: 1: Hoare triple {644#true} assume true; {644#true} is VALID [2022-02-20 18:12:18,640 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {644#true} {646#(= 1 ~systemActive~0)} #243#return; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:12:18,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,645 INFO L290 TraceCheckUtils]: 0: Hoare triple {644#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {644#true} is VALID [2022-02-20 18:12:18,645 INFO L290 TraceCheckUtils]: 1: Hoare triple {644#true} assume true; {644#true} is VALID [2022-02-20 18:12:18,645 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {644#true} {645#false} #249#return; {645#false} is VALID [2022-02-20 18:12:18,648 INFO L290 TraceCheckUtils]: 0: Hoare triple {644#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,648 INFO L290 TraceCheckUtils]: 1: Hoare triple {646#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,648 INFO L290 TraceCheckUtils]: 2: Hoare triple {646#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,649 INFO L290 TraceCheckUtils]: 3: Hoare triple {646#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,649 INFO L290 TraceCheckUtils]: 4: Hoare triple {646#(= 1 ~systemActive~0)} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,650 INFO L290 TraceCheckUtils]: 5: Hoare triple {646#(= 1 ~systemActive~0)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,650 INFO L290 TraceCheckUtils]: 6: Hoare triple {646#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,651 INFO L290 TraceCheckUtils]: 7: Hoare triple {646#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,651 INFO L290 TraceCheckUtils]: 8: Hoare triple {646#(= 1 ~systemActive~0)} assume !false; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,652 INFO L290 TraceCheckUtils]: 9: Hoare triple {646#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,652 INFO L290 TraceCheckUtils]: 10: Hoare triple {646#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,652 INFO L290 TraceCheckUtils]: 11: Hoare triple {646#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~4#1); {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,653 INFO L290 TraceCheckUtils]: 12: Hoare triple {646#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,653 INFO L290 TraceCheckUtils]: 13: Hoare triple {646#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,654 INFO L290 TraceCheckUtils]: 14: Hoare triple {646#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,654 INFO L290 TraceCheckUtils]: 15: Hoare triple {646#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,655 INFO L272 TraceCheckUtils]: 16: Hoare triple {646#(= 1 ~systemActive~0)} call timeShift(); {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,655 INFO L290 TraceCheckUtils]: 17: Hoare triple {646#(= 1 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,655 INFO L272 TraceCheckUtils]: 18: Hoare triple {646#(= 1 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {644#true} is VALID [2022-02-20 18:12:18,656 INFO L290 TraceCheckUtils]: 19: Hoare triple {644#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {644#true} is VALID [2022-02-20 18:12:18,656 INFO L290 TraceCheckUtils]: 20: Hoare triple {644#true} assume true; {644#true} is VALID [2022-02-20 18:12:18,656 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {644#true} {646#(= 1 ~systemActive~0)} #243#return; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,657 INFO L290 TraceCheckUtils]: 22: Hoare triple {646#(= 1 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,657 INFO L290 TraceCheckUtils]: 23: Hoare triple {646#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,658 INFO L290 TraceCheckUtils]: 24: Hoare triple {646#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {646#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:18,658 INFO L290 TraceCheckUtils]: 25: Hoare triple {646#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {645#false} is VALID [2022-02-20 18:12:18,658 INFO L290 TraceCheckUtils]: 26: Hoare triple {645#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {645#false} is VALID [2022-02-20 18:12:18,659 INFO L290 TraceCheckUtils]: 27: Hoare triple {645#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {645#false} is VALID [2022-02-20 18:12:18,659 INFO L290 TraceCheckUtils]: 28: Hoare triple {645#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {645#false} is VALID [2022-02-20 18:12:18,659 INFO L272 TraceCheckUtils]: 29: Hoare triple {645#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {644#true} is VALID [2022-02-20 18:12:18,659 INFO L290 TraceCheckUtils]: 30: Hoare triple {644#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {644#true} is VALID [2022-02-20 18:12:18,659 INFO L290 TraceCheckUtils]: 31: Hoare triple {644#true} assume true; {644#true} is VALID [2022-02-20 18:12:18,659 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {644#true} {645#false} #249#return; {645#false} is VALID [2022-02-20 18:12:18,659 INFO L290 TraceCheckUtils]: 33: Hoare triple {645#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {645#false} is VALID [2022-02-20 18:12:18,660 INFO L290 TraceCheckUtils]: 34: Hoare triple {645#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {645#false} is VALID [2022-02-20 18:12:18,660 INFO L290 TraceCheckUtils]: 35: Hoare triple {645#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {645#false} is VALID [2022-02-20 18:12:18,660 INFO L290 TraceCheckUtils]: 36: Hoare triple {645#false} assume !false; {645#false} is VALID [2022-02-20 18:12:18,660 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:18,660 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:18,660 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1179879904] [2022-02-20 18:12:18,661 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1179879904] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:18,661 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:18,661 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:18,661 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [504718299] [2022-02-20 18:12:18,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:18,663 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:12:18,663 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:18,663 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:18,691 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:18,691 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:18,691 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:18,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:18,692 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:18,692 INFO L87 Difference]: Start difference. First operand 83 states and 107 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:18,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,782 INFO L93 Difference]: Finished difference Result 158 states and 209 transitions. [2022-02-20 18:12:18,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:18,783 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:12:18,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:18,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:18,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 209 transitions. [2022-02-20 18:12:18,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:18,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 209 transitions. [2022-02-20 18:12:18,791 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 209 transitions. [2022-02-20 18:12:18,959 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 209 edges. 209 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:18,962 INFO L225 Difference]: With dead ends: 158 [2022-02-20 18:12:18,962 INFO L226 Difference]: Without dead ends: 83 [2022-02-20 18:12:18,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:18,964 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 84 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:18,965 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 105 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:18,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-02-20 18:12:18,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2022-02-20 18:12:18,972 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:18,973 INFO L82 GeneralOperation]: Start isEquivalent. First operand 83 states. Second operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,973 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,974 INFO L87 Difference]: Start difference. First operand 83 states. Second operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,977 INFO L93 Difference]: Finished difference Result 83 states and 106 transitions. [2022-02-20 18:12:18,977 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 106 transitions. [2022-02-20 18:12:18,978 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:18,978 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:18,979 INFO L74 IsIncluded]: Start isIncluded. First operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 83 states. [2022-02-20 18:12:18,979 INFO L87 Difference]: Start difference. First operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 83 states. [2022-02-20 18:12:18,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,983 INFO L93 Difference]: Finished difference Result 83 states and 106 transitions. [2022-02-20 18:12:18,983 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 106 transitions. [2022-02-20 18:12:18,984 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:18,984 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:18,984 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:18,984 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:18,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:18,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 106 transitions. [2022-02-20 18:12:18,988 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 106 transitions. Word has length 37 [2022-02-20 18:12:18,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:18,988 INFO L470 AbstractCegarLoop]: Abstraction has 83 states and 106 transitions. [2022-02-20 18:12:18,989 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:18,989 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 106 transitions. [2022-02-20 18:12:18,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-02-20 18:12:18,990 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:18,990 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:18,990 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:12:18,990 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:18,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:18,991 INFO L85 PathProgramCache]: Analyzing trace with hash -2098549486, now seen corresponding path program 1 times [2022-02-20 18:12:18,991 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:18,991 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010790747] [2022-02-20 18:12:18,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:18,991 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:19,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:12:19,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,043 INFO L290 TraceCheckUtils]: 0: Hoare triple {1168#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1168#true} is VALID [2022-02-20 18:12:19,043 INFO L290 TraceCheckUtils]: 1: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,043 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1168#true} {1169#false} #243#return; {1169#false} is VALID [2022-02-20 18:12:19,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:12:19,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:19,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,054 INFO L290 TraceCheckUtils]: 0: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,054 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {1168#true} {1168#true} #261#return; {1168#true} is VALID [2022-02-20 18:12:19,054 INFO L290 TraceCheckUtils]: 0: Hoare triple {1184#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {1168#true} is VALID [2022-02-20 18:12:19,054 INFO L290 TraceCheckUtils]: 1: Hoare triple {1168#true} assume !(0 == ~pumpRunning~0); {1168#true} is VALID [2022-02-20 18:12:19,055 INFO L272 TraceCheckUtils]: 2: Hoare triple {1168#true} call processEnvironment__wrappee__base(); {1168#true} is VALID [2022-02-20 18:12:19,055 INFO L290 TraceCheckUtils]: 3: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,055 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {1168#true} {1168#true} #261#return; {1168#true} is VALID [2022-02-20 18:12:19,055 INFO L290 TraceCheckUtils]: 5: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,055 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1168#true} {1169#false} #247#return; {1169#false} is VALID [2022-02-20 18:12:19,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-02-20 18:12:19,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,074 INFO L290 TraceCheckUtils]: 0: Hoare triple {1168#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1168#true} is VALID [2022-02-20 18:12:19,075 INFO L290 TraceCheckUtils]: 1: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,075 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1168#true} {1169#false} #249#return; {1169#false} is VALID [2022-02-20 18:12:19,075 INFO L290 TraceCheckUtils]: 0: Hoare triple {1168#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {1168#true} is VALID [2022-02-20 18:12:19,075 INFO L290 TraceCheckUtils]: 1: Hoare triple {1168#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {1168#true} is VALID [2022-02-20 18:12:19,075 INFO L290 TraceCheckUtils]: 2: Hoare triple {1168#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1168#true} is VALID [2022-02-20 18:12:19,075 INFO L290 TraceCheckUtils]: 3: Hoare triple {1168#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {1168#true} is VALID [2022-02-20 18:12:19,076 INFO L290 TraceCheckUtils]: 4: Hoare triple {1168#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {1168#true} is VALID [2022-02-20 18:12:19,076 INFO L290 TraceCheckUtils]: 5: Hoare triple {1168#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {1168#true} is VALID [2022-02-20 18:12:19,076 INFO L290 TraceCheckUtils]: 6: Hoare triple {1168#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1168#true} is VALID [2022-02-20 18:12:19,076 INFO L290 TraceCheckUtils]: 7: Hoare triple {1168#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1170#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:19,077 INFO L290 TraceCheckUtils]: 8: Hoare triple {1170#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {1170#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:19,077 INFO L290 TraceCheckUtils]: 9: Hoare triple {1170#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {1169#false} is VALID [2022-02-20 18:12:19,077 INFO L272 TraceCheckUtils]: 10: Hoare triple {1169#false} call cleanup(); {1169#false} is VALID [2022-02-20 18:12:19,078 INFO L290 TraceCheckUtils]: 11: Hoare triple {1169#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1169#false} is VALID [2022-02-20 18:12:19,078 INFO L272 TraceCheckUtils]: 12: Hoare triple {1169#false} call timeShift(); {1169#false} is VALID [2022-02-20 18:12:19,078 INFO L290 TraceCheckUtils]: 13: Hoare triple {1169#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {1169#false} is VALID [2022-02-20 18:12:19,078 INFO L272 TraceCheckUtils]: 14: Hoare triple {1169#false} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {1168#true} is VALID [2022-02-20 18:12:19,078 INFO L290 TraceCheckUtils]: 15: Hoare triple {1168#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1168#true} is VALID [2022-02-20 18:12:19,078 INFO L290 TraceCheckUtils]: 16: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,078 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {1168#true} {1169#false} #243#return; {1169#false} is VALID [2022-02-20 18:12:19,079 INFO L290 TraceCheckUtils]: 18: Hoare triple {1169#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {1169#false} is VALID [2022-02-20 18:12:19,079 INFO L290 TraceCheckUtils]: 19: Hoare triple {1169#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1169#false} is VALID [2022-02-20 18:12:19,079 INFO L290 TraceCheckUtils]: 20: Hoare triple {1169#false} assume !(0 != ~pumpRunning~0); {1169#false} is VALID [2022-02-20 18:12:19,079 INFO L290 TraceCheckUtils]: 21: Hoare triple {1169#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {1169#false} is VALID [2022-02-20 18:12:19,079 INFO L290 TraceCheckUtils]: 22: Hoare triple {1169#false} assume !(0 != ~pumpRunning~0); {1169#false} is VALID [2022-02-20 18:12:19,079 INFO L272 TraceCheckUtils]: 23: Hoare triple {1169#false} call processEnvironment__wrappee__highWaterSensor(); {1184#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:19,079 INFO L290 TraceCheckUtils]: 24: Hoare triple {1184#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {1168#true} is VALID [2022-02-20 18:12:19,080 INFO L290 TraceCheckUtils]: 25: Hoare triple {1168#true} assume !(0 == ~pumpRunning~0); {1168#true} is VALID [2022-02-20 18:12:19,080 INFO L272 TraceCheckUtils]: 26: Hoare triple {1168#true} call processEnvironment__wrappee__base(); {1168#true} is VALID [2022-02-20 18:12:19,080 INFO L290 TraceCheckUtils]: 27: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,080 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {1168#true} {1168#true} #261#return; {1168#true} is VALID [2022-02-20 18:12:19,080 INFO L290 TraceCheckUtils]: 29: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,080 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {1168#true} {1169#false} #247#return; {1169#false} is VALID [2022-02-20 18:12:19,080 INFO L290 TraceCheckUtils]: 31: Hoare triple {1169#false} assume { :end_inline_processEnvironment } true; {1169#false} is VALID [2022-02-20 18:12:19,081 INFO L290 TraceCheckUtils]: 32: Hoare triple {1169#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {1169#false} is VALID [2022-02-20 18:12:19,081 INFO L290 TraceCheckUtils]: 33: Hoare triple {1169#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {1169#false} is VALID [2022-02-20 18:12:19,081 INFO L290 TraceCheckUtils]: 34: Hoare triple {1169#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {1169#false} is VALID [2022-02-20 18:12:19,081 INFO L272 TraceCheckUtils]: 35: Hoare triple {1169#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {1168#true} is VALID [2022-02-20 18:12:19,081 INFO L290 TraceCheckUtils]: 36: Hoare triple {1168#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1168#true} is VALID [2022-02-20 18:12:19,081 INFO L290 TraceCheckUtils]: 37: Hoare triple {1168#true} assume true; {1168#true} is VALID [2022-02-20 18:12:19,081 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {1168#true} {1169#false} #249#return; {1169#false} is VALID [2022-02-20 18:12:19,082 INFO L290 TraceCheckUtils]: 39: Hoare triple {1169#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {1169#false} is VALID [2022-02-20 18:12:19,082 INFO L290 TraceCheckUtils]: 40: Hoare triple {1169#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {1169#false} is VALID [2022-02-20 18:12:19,082 INFO L290 TraceCheckUtils]: 41: Hoare triple {1169#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1169#false} is VALID [2022-02-20 18:12:19,082 INFO L290 TraceCheckUtils]: 42: Hoare triple {1169#false} assume !false; {1169#false} is VALID [2022-02-20 18:12:19,082 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:19,083 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:19,083 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1010790747] [2022-02-20 18:12:19,087 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1010790747] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:19,087 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:19,087 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:12:19,088 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503605379] [2022-02-20 18:12:19,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:19,088 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2022-02-20 18:12:19,089 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:19,089 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:19,118 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:19,119 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:12:19,119 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:19,119 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:12:19,119 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:12:19,120 INFO L87 Difference]: Start difference. First operand 83 states and 106 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:19,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:19,402 INFO L93 Difference]: Finished difference Result 146 states and 186 transitions. [2022-02-20 18:12:19,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-20 18:12:19,402 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2022-02-20 18:12:19,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:19,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:19,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 186 transitions. [2022-02-20 18:12:19,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:19,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 186 transitions. [2022-02-20 18:12:19,409 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 186 transitions. [2022-02-20 18:12:19,621 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 186 edges. 186 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:19,624 INFO L225 Difference]: With dead ends: 146 [2022-02-20 18:12:19,624 INFO L226 Difference]: Without dead ends: 89 [2022-02-20 18:12:19,625 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:12:19,626 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 63 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:19,626 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 190 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:19,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-02-20 18:12:19,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 74. [2022-02-20 18:12:19,633 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:19,634 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:19,634 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:19,635 INFO L87 Difference]: Start difference. First operand 89 states. Second operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:19,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:19,638 INFO L93 Difference]: Finished difference Result 89 states and 113 transitions. [2022-02-20 18:12:19,638 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 113 transitions. [2022-02-20 18:12:19,638 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:19,639 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:19,639 INFO L74 IsIncluded]: Start isIncluded. First operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 89 states. [2022-02-20 18:12:19,639 INFO L87 Difference]: Start difference. First operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 89 states. [2022-02-20 18:12:19,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:19,642 INFO L93 Difference]: Finished difference Result 89 states and 113 transitions. [2022-02-20 18:12:19,642 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 113 transitions. [2022-02-20 18:12:19,643 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:19,643 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:19,643 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:19,643 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:19,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:19,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 94 transitions. [2022-02-20 18:12:19,646 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 94 transitions. Word has length 43 [2022-02-20 18:12:19,646 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:19,646 INFO L470 AbstractCegarLoop]: Abstraction has 74 states and 94 transitions. [2022-02-20 18:12:19,646 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:19,646 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 94 transitions. [2022-02-20 18:12:19,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:12:19,647 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:19,647 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:19,648 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:12:19,648 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:19,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:19,648 INFO L85 PathProgramCache]: Analyzing trace with hash 273957597, now seen corresponding path program 1 times [2022-02-20 18:12:19,648 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:19,648 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857398717] [2022-02-20 18:12:19,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:19,649 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:19,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:19,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,703 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1681#true} is VALID [2022-02-20 18:12:19,704 INFO L290 TraceCheckUtils]: 1: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,704 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1681#true} {1681#true} #243#return; {1681#true} is VALID [2022-02-20 18:12:19,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:19,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:19,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,724 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {1681#true} {1698#(not (= |old(~pumpRunning~0)| 0))} #261#return; {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,724 INFO L290 TraceCheckUtils]: 0: Hoare triple {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:19,725 INFO L290 TraceCheckUtils]: 1: Hoare triple {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,725 INFO L272 TraceCheckUtils]: 2: Hoare triple {1698#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1681#true} is VALID [2022-02-20 18:12:19,725 INFO L290 TraceCheckUtils]: 3: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,725 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {1681#true} {1698#(not (= |old(~pumpRunning~0)| 0))} #261#return; {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,726 INFO L290 TraceCheckUtils]: 5: Hoare triple {1698#(not (= |old(~pumpRunning~0)| 0))} assume true; {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,726 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1698#(not (= |old(~pumpRunning~0)| 0))} {1686#(= ~pumpRunning~0 0)} #247#return; {1682#false} is VALID [2022-02-20 18:12:19,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:12:19,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1681#true} is VALID [2022-02-20 18:12:19,730 INFO L290 TraceCheckUtils]: 1: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,730 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1681#true} {1682#false} #249#return; {1682#false} is VALID [2022-02-20 18:12:19,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {1681#true} is VALID [2022-02-20 18:12:19,730 INFO L290 TraceCheckUtils]: 1: Hoare triple {1681#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 2: Hoare triple {1681#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 3: Hoare triple {1681#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 4: Hoare triple {1681#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 5: Hoare triple {1681#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 6: Hoare triple {1681#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 7: Hoare triple {1681#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 8: Hoare triple {1681#true} assume !false; {1681#true} is VALID [2022-02-20 18:12:19,731 INFO L290 TraceCheckUtils]: 9: Hoare triple {1681#true} assume test_~splverifierCounter~0#1 < 4; {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L290 TraceCheckUtils]: 10: Hoare triple {1681#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L290 TraceCheckUtils]: 11: Hoare triple {1681#true} assume !(0 != test_~tmp~4#1); {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L290 TraceCheckUtils]: 12: Hoare triple {1681#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L290 TraceCheckUtils]: 13: Hoare triple {1681#true} assume !(0 != test_~tmp___0~2#1); {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L290 TraceCheckUtils]: 14: Hoare triple {1681#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L290 TraceCheckUtils]: 15: Hoare triple {1681#true} assume 0 != test_~tmp___2~0#1; {1681#true} is VALID [2022-02-20 18:12:19,732 INFO L272 TraceCheckUtils]: 16: Hoare triple {1681#true} call timeShift(); {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L290 TraceCheckUtils]: 17: Hoare triple {1681#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L272 TraceCheckUtils]: 18: Hoare triple {1681#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L290 TraceCheckUtils]: 19: Hoare triple {1681#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L290 TraceCheckUtils]: 20: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1681#true} {1681#true} #243#return; {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L290 TraceCheckUtils]: 22: Hoare triple {1681#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {1681#true} is VALID [2022-02-20 18:12:19,733 INFO L290 TraceCheckUtils]: 23: Hoare triple {1681#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1681#true} is VALID [2022-02-20 18:12:19,734 INFO L290 TraceCheckUtils]: 24: Hoare triple {1681#true} assume !(0 != ~pumpRunning~0); {1686#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:19,734 INFO L290 TraceCheckUtils]: 25: Hoare triple {1686#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {1686#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:19,735 INFO L290 TraceCheckUtils]: 26: Hoare triple {1686#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1686#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:19,735 INFO L272 TraceCheckUtils]: 27: Hoare triple {1686#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:19,736 INFO L290 TraceCheckUtils]: 28: Hoare triple {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:19,736 INFO L290 TraceCheckUtils]: 29: Hoare triple {1697#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,736 INFO L272 TraceCheckUtils]: 30: Hoare triple {1698#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1681#true} is VALID [2022-02-20 18:12:19,736 INFO L290 TraceCheckUtils]: 31: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,737 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {1681#true} {1698#(not (= |old(~pumpRunning~0)| 0))} #261#return; {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,737 INFO L290 TraceCheckUtils]: 33: Hoare triple {1698#(not (= |old(~pumpRunning~0)| 0))} assume true; {1698#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:19,737 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {1698#(not (= |old(~pumpRunning~0)| 0))} {1686#(= ~pumpRunning~0 0)} #247#return; {1682#false} is VALID [2022-02-20 18:12:19,738 INFO L290 TraceCheckUtils]: 35: Hoare triple {1682#false} assume { :end_inline_processEnvironment } true; {1682#false} is VALID [2022-02-20 18:12:19,738 INFO L290 TraceCheckUtils]: 36: Hoare triple {1682#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {1682#false} is VALID [2022-02-20 18:12:19,738 INFO L290 TraceCheckUtils]: 37: Hoare triple {1682#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {1682#false} is VALID [2022-02-20 18:12:19,738 INFO L290 TraceCheckUtils]: 38: Hoare triple {1682#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {1682#false} is VALID [2022-02-20 18:12:19,738 INFO L272 TraceCheckUtils]: 39: Hoare triple {1682#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {1681#true} is VALID [2022-02-20 18:12:19,738 INFO L290 TraceCheckUtils]: 40: Hoare triple {1681#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {1681#true} is VALID [2022-02-20 18:12:19,738 INFO L290 TraceCheckUtils]: 41: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:12:19,739 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {1681#true} {1682#false} #249#return; {1682#false} is VALID [2022-02-20 18:12:19,739 INFO L290 TraceCheckUtils]: 43: Hoare triple {1682#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {1682#false} is VALID [2022-02-20 18:12:19,739 INFO L290 TraceCheckUtils]: 44: Hoare triple {1682#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {1682#false} is VALID [2022-02-20 18:12:19,739 INFO L290 TraceCheckUtils]: 45: Hoare triple {1682#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1682#false} is VALID [2022-02-20 18:12:19,739 INFO L290 TraceCheckUtils]: 46: Hoare triple {1682#false} assume !false; {1682#false} is VALID [2022-02-20 18:12:19,739 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:19,740 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:19,740 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857398717] [2022-02-20 18:12:19,740 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857398717] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:19,740 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:19,740 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:19,740 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052506117] [2022-02-20 18:12:19,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:19,741 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2022-02-20 18:12:19,741 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:19,742 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-02-20 18:12:19,775 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:19,775 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:19,776 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:19,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:19,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:19,776 INFO L87 Difference]: Start difference. First operand 74 states and 94 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-02-20 18:12:20,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:20,217 INFO L93 Difference]: Finished difference Result 218 states and 279 transitions. [2022-02-20 18:12:20,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:20,217 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2022-02-20 18:12:20,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:20,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-02-20 18:12:20,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 279 transitions. [2022-02-20 18:12:20,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-02-20 18:12:20,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 279 transitions. [2022-02-20 18:12:20,226 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 279 transitions. [2022-02-20 18:12:20,444 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 279 edges. 279 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:20,448 INFO L225 Difference]: With dead ends: 218 [2022-02-20 18:12:20,449 INFO L226 Difference]: Without dead ends: 152 [2022-02-20 18:12:20,449 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:12:20,450 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 194 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 197 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:20,451 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [197 Valid, 314 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:20,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-02-20 18:12:20,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 146. [2022-02-20 18:12:20,461 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:20,462 INFO L82 GeneralOperation]: Start isEquivalent. First operand 152 states. Second operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:20,462 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:20,463 INFO L87 Difference]: Start difference. First operand 152 states. Second operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:20,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:20,468 INFO L93 Difference]: Finished difference Result 152 states and 184 transitions. [2022-02-20 18:12:20,469 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 184 transitions. [2022-02-20 18:12:20,469 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:20,469 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:20,470 INFO L74 IsIncluded]: Start isIncluded. First operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 152 states. [2022-02-20 18:12:20,470 INFO L87 Difference]: Start difference. First operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 152 states. [2022-02-20 18:12:20,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:20,476 INFO L93 Difference]: Finished difference Result 152 states and 184 transitions. [2022-02-20 18:12:20,476 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 184 transitions. [2022-02-20 18:12:20,477 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:20,477 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:20,477 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:20,477 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:20,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:20,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 181 transitions. [2022-02-20 18:12:20,483 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 181 transitions. Word has length 47 [2022-02-20 18:12:20,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:20,484 INFO L470 AbstractCegarLoop]: Abstraction has 146 states and 181 transitions. [2022-02-20 18:12:20,484 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-02-20 18:12:20,484 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 181 transitions. [2022-02-20 18:12:20,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:20,485 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:20,485 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:20,485 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:12:20,485 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:20,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:20,486 INFO L85 PathProgramCache]: Analyzing trace with hash -419087457, now seen corresponding path program 1 times [2022-02-20 18:12:20,486 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:20,486 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1088066455] [2022-02-20 18:12:20,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:20,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:20,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:20,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 0: Hoare triple {2520#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {2520#true} is VALID [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 1: Hoare triple {2520#true} assume true; {2520#true} is VALID [2022-02-20 18:12:20,564 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2520#true} {2520#true} #243#return; {2520#true} is VALID [2022-02-20 18:12:20,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:20,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {2539#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {2520#true} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 1: Hoare triple {2520#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {2520#true} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 2: Hoare triple {2520#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {2520#true} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 3: Hoare triple {2520#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {2520#true} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 4: Hoare triple {2520#true} assume 0 != isHighWaterLevel_~tmp~2#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2540#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 5: Hoare triple {2540#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {2541#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 6: Hoare triple {2541#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {2542#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 7: Hoare triple {2542#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2521#false} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 8: Hoare triple {2521#false} assume { :end_inline_activatePump } true; {2521#false} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 9: Hoare triple {2521#false} assume true; {2521#false} is VALID [2022-02-20 18:12:20,593 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2521#false} {2520#true} #247#return; {2521#false} is VALID [2022-02-20 18:12:20,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:20,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,596 INFO L290 TraceCheckUtils]: 0: Hoare triple {2520#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {2520#true} is VALID [2022-02-20 18:12:20,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {2520#true} assume true; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2520#true} {2521#false} #249#return; {2521#false} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 0: Hoare triple {2520#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 1: Hoare triple {2520#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 2: Hoare triple {2520#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 3: Hoare triple {2520#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 4: Hoare triple {2520#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 5: Hoare triple {2520#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 6: Hoare triple {2520#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {2520#true} is VALID [2022-02-20 18:12:20,597 INFO L290 TraceCheckUtils]: 7: Hoare triple {2520#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 8: Hoare triple {2520#true} assume !false; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 9: Hoare triple {2520#true} assume test_~splverifierCounter~0#1 < 4; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 10: Hoare triple {2520#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 11: Hoare triple {2520#true} assume !(0 != test_~tmp~4#1); {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 12: Hoare triple {2520#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 13: Hoare triple {2520#true} assume !(0 != test_~tmp___0~2#1); {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 14: Hoare triple {2520#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 15: Hoare triple {2520#true} assume 0 != test_~tmp___2~0#1; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L272 TraceCheckUtils]: 16: Hoare triple {2520#true} call timeShift(); {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L290 TraceCheckUtils]: 17: Hoare triple {2520#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {2520#true} is VALID [2022-02-20 18:12:20,598 INFO L272 TraceCheckUtils]: 18: Hoare triple {2520#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 19: Hoare triple {2520#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 20: Hoare triple {2520#true} assume true; {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {2520#true} {2520#true} #243#return; {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 22: Hoare triple {2520#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 23: Hoare triple {2520#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 24: Hoare triple {2520#true} assume !(0 != ~pumpRunning~0); {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 25: Hoare triple {2520#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {2520#true} is VALID [2022-02-20 18:12:20,599 INFO L290 TraceCheckUtils]: 26: Hoare triple {2520#true} assume !(0 != ~pumpRunning~0); {2520#true} is VALID [2022-02-20 18:12:20,600 INFO L272 TraceCheckUtils]: 27: Hoare triple {2520#true} call processEnvironment__wrappee__highWaterSensor(); {2539#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,600 INFO L290 TraceCheckUtils]: 28: Hoare triple {2539#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {2520#true} is VALID [2022-02-20 18:12:20,600 INFO L290 TraceCheckUtils]: 29: Hoare triple {2520#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {2520#true} is VALID [2022-02-20 18:12:20,600 INFO L290 TraceCheckUtils]: 30: Hoare triple {2520#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {2520#true} is VALID [2022-02-20 18:12:20,600 INFO L290 TraceCheckUtils]: 31: Hoare triple {2520#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {2520#true} is VALID [2022-02-20 18:12:20,600 INFO L290 TraceCheckUtils]: 32: Hoare triple {2520#true} assume 0 != isHighWaterLevel_~tmp~2#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2540#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:20,601 INFO L290 TraceCheckUtils]: 33: Hoare triple {2540#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {2541#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:20,601 INFO L290 TraceCheckUtils]: 34: Hoare triple {2541#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {2542#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:12:20,602 INFO L290 TraceCheckUtils]: 35: Hoare triple {2542#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2521#false} is VALID [2022-02-20 18:12:20,603 INFO L290 TraceCheckUtils]: 36: Hoare triple {2521#false} assume { :end_inline_activatePump } true; {2521#false} is VALID [2022-02-20 18:12:20,603 INFO L290 TraceCheckUtils]: 37: Hoare triple {2521#false} assume true; {2521#false} is VALID [2022-02-20 18:12:20,604 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {2521#false} {2520#true} #247#return; {2521#false} is VALID [2022-02-20 18:12:20,604 INFO L290 TraceCheckUtils]: 39: Hoare triple {2521#false} assume { :end_inline_processEnvironment } true; {2521#false} is VALID [2022-02-20 18:12:20,604 INFO L290 TraceCheckUtils]: 40: Hoare triple {2521#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {2521#false} is VALID [2022-02-20 18:12:20,604 INFO L290 TraceCheckUtils]: 41: Hoare triple {2521#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {2521#false} is VALID [2022-02-20 18:12:20,604 INFO L290 TraceCheckUtils]: 42: Hoare triple {2521#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {2521#false} is VALID [2022-02-20 18:12:20,604 INFO L272 TraceCheckUtils]: 43: Hoare triple {2521#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {2520#true} is VALID [2022-02-20 18:12:20,605 INFO L290 TraceCheckUtils]: 44: Hoare triple {2520#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {2520#true} is VALID [2022-02-20 18:12:20,605 INFO L290 TraceCheckUtils]: 45: Hoare triple {2520#true} assume true; {2520#true} is VALID [2022-02-20 18:12:20,605 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {2520#true} {2521#false} #249#return; {2521#false} is VALID [2022-02-20 18:12:20,605 INFO L290 TraceCheckUtils]: 47: Hoare triple {2521#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {2521#false} is VALID [2022-02-20 18:12:20,605 INFO L290 TraceCheckUtils]: 48: Hoare triple {2521#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {2521#false} is VALID [2022-02-20 18:12:20,605 INFO L290 TraceCheckUtils]: 49: Hoare triple {2521#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {2521#false} is VALID [2022-02-20 18:12:20,606 INFO L290 TraceCheckUtils]: 50: Hoare triple {2521#false} assume !false; {2521#false} is VALID [2022-02-20 18:12:20,606 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:20,606 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:20,606 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1088066455] [2022-02-20 18:12:20,607 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1088066455] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:20,607 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:20,607 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:20,607 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052036590] [2022-02-20 18:12:20,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:20,608 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:20,608 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:20,608 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:20,640 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:20,641 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:20,641 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:20,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:20,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:20,642 INFO L87 Difference]: Start difference. First operand 146 states and 181 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:21,050 INFO L93 Difference]: Finished difference Result 292 states and 366 transitions. [2022-02-20 18:12:21,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:21,051 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:21,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:21,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 209 transitions. [2022-02-20 18:12:21,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 209 transitions. [2022-02-20 18:12:21,058 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 209 transitions. [2022-02-20 18:12:21,224 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 209 edges. 209 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:21,227 INFO L225 Difference]: With dead ends: 292 [2022-02-20 18:12:21,228 INFO L226 Difference]: Without dead ends: 154 [2022-02-20 18:12:21,228 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:21,229 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 64 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:21,230 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 388 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:21,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2022-02-20 18:12:21,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 149. [2022-02-20 18:12:21,239 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:21,239 INFO L82 GeneralOperation]: Start isEquivalent. First operand 154 states. Second operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:21,240 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:21,240 INFO L87 Difference]: Start difference. First operand 154 states. Second operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:21,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:21,245 INFO L93 Difference]: Finished difference Result 154 states and 189 transitions. [2022-02-20 18:12:21,245 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 189 transitions. [2022-02-20 18:12:21,246 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:21,246 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:21,247 INFO L74 IsIncluded]: Start isIncluded. First operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 154 states. [2022-02-20 18:12:21,259 INFO L87 Difference]: Start difference. First operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 154 states. [2022-02-20 18:12:21,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:21,265 INFO L93 Difference]: Finished difference Result 154 states and 189 transitions. [2022-02-20 18:12:21,265 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 189 transitions. [2022-02-20 18:12:21,265 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:21,265 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:21,266 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:21,266 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:21,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:21,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 184 transitions. [2022-02-20 18:12:21,270 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 184 transitions. Word has length 51 [2022-02-20 18:12:21,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:21,271 INFO L470 AbstractCegarLoop]: Abstraction has 149 states and 184 transitions. [2022-02-20 18:12:21,271 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,279 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 184 transitions. [2022-02-20 18:12:21,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:21,280 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:21,280 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:21,281 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:12:21,281 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:21,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:21,282 INFO L85 PathProgramCache]: Analyzing trace with hash -2108031199, now seen corresponding path program 1 times [2022-02-20 18:12:21,282 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:21,282 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423303643] [2022-02-20 18:12:21,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:21,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:21,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:21,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:21,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:21,358 INFO L290 TraceCheckUtils]: 0: Hoare triple {3471#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {3471#true} is VALID [2022-02-20 18:12:21,370 INFO L290 TraceCheckUtils]: 1: Hoare triple {3471#true} assume true; {3471#true} is VALID [2022-02-20 18:12:21,370 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3471#true} {3471#true} #243#return; {3471#true} is VALID [2022-02-20 18:12:21,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:21,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:21,403 INFO L290 TraceCheckUtils]: 0: Hoare triple {3490#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3471#true} is VALID [2022-02-20 18:12:21,403 INFO L290 TraceCheckUtils]: 1: Hoare triple {3471#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {3471#true} is VALID [2022-02-20 18:12:21,403 INFO L290 TraceCheckUtils]: 2: Hoare triple {3471#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {3491#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:12:21,404 INFO L290 TraceCheckUtils]: 3: Hoare triple {3491#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {3492#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|) 0)} is VALID [2022-02-20 18:12:21,404 INFO L290 TraceCheckUtils]: 4: Hoare triple {3492#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {3472#false} is VALID [2022-02-20 18:12:21,405 INFO L290 TraceCheckUtils]: 5: Hoare triple {3472#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {3472#false} is VALID [2022-02-20 18:12:21,405 INFO L290 TraceCheckUtils]: 6: Hoare triple {3472#false} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {3472#false} is VALID [2022-02-20 18:12:21,405 INFO L290 TraceCheckUtils]: 7: Hoare triple {3472#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3472#false} is VALID [2022-02-20 18:12:21,405 INFO L290 TraceCheckUtils]: 8: Hoare triple {3472#false} assume { :end_inline_activatePump } true; {3472#false} is VALID [2022-02-20 18:12:21,405 INFO L290 TraceCheckUtils]: 9: Hoare triple {3472#false} assume true; {3472#false} is VALID [2022-02-20 18:12:21,405 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {3472#false} {3471#true} #247#return; {3472#false} is VALID [2022-02-20 18:12:21,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:21,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:21,409 INFO L290 TraceCheckUtils]: 0: Hoare triple {3471#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {3471#true} is VALID [2022-02-20 18:12:21,409 INFO L290 TraceCheckUtils]: 1: Hoare triple {3471#true} assume true; {3471#true} is VALID [2022-02-20 18:12:21,409 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3471#true} {3472#false} #249#return; {3472#false} is VALID [2022-02-20 18:12:21,409 INFO L290 TraceCheckUtils]: 0: Hoare triple {3471#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {3471#true} is VALID [2022-02-20 18:12:21,409 INFO L290 TraceCheckUtils]: 1: Hoare triple {3471#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {3471#true} is VALID [2022-02-20 18:12:21,410 INFO L290 TraceCheckUtils]: 2: Hoare triple {3471#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3471#true} is VALID [2022-02-20 18:12:21,410 INFO L290 TraceCheckUtils]: 3: Hoare triple {3471#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {3471#true} is VALID [2022-02-20 18:12:21,410 INFO L290 TraceCheckUtils]: 4: Hoare triple {3471#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {3471#true} is VALID [2022-02-20 18:12:21,410 INFO L290 TraceCheckUtils]: 5: Hoare triple {3471#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {3471#true} is VALID [2022-02-20 18:12:21,410 INFO L290 TraceCheckUtils]: 6: Hoare triple {3471#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {3471#true} is VALID [2022-02-20 18:12:21,410 INFO L290 TraceCheckUtils]: 7: Hoare triple {3471#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3471#true} is VALID [2022-02-20 18:12:21,411 INFO L290 TraceCheckUtils]: 8: Hoare triple {3471#true} assume !false; {3471#true} is VALID [2022-02-20 18:12:21,411 INFO L290 TraceCheckUtils]: 9: Hoare triple {3471#true} assume test_~splverifierCounter~0#1 < 4; {3471#true} is VALID [2022-02-20 18:12:21,411 INFO L290 TraceCheckUtils]: 10: Hoare triple {3471#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {3471#true} is VALID [2022-02-20 18:12:21,411 INFO L290 TraceCheckUtils]: 11: Hoare triple {3471#true} assume !(0 != test_~tmp~4#1); {3471#true} is VALID [2022-02-20 18:12:21,411 INFO L290 TraceCheckUtils]: 12: Hoare triple {3471#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L290 TraceCheckUtils]: 13: Hoare triple {3471#true} assume !(0 != test_~tmp___0~2#1); {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L290 TraceCheckUtils]: 14: Hoare triple {3471#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L290 TraceCheckUtils]: 15: Hoare triple {3471#true} assume 0 != test_~tmp___2~0#1; {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L272 TraceCheckUtils]: 16: Hoare triple {3471#true} call timeShift(); {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L290 TraceCheckUtils]: 17: Hoare triple {3471#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L272 TraceCheckUtils]: 18: Hoare triple {3471#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {3471#true} is VALID [2022-02-20 18:12:21,412 INFO L290 TraceCheckUtils]: 19: Hoare triple {3471#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {3471#true} is VALID [2022-02-20 18:12:21,413 INFO L290 TraceCheckUtils]: 20: Hoare triple {3471#true} assume true; {3471#true} is VALID [2022-02-20 18:12:21,413 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3471#true} {3471#true} #243#return; {3471#true} is VALID [2022-02-20 18:12:21,413 INFO L290 TraceCheckUtils]: 22: Hoare triple {3471#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {3471#true} is VALID [2022-02-20 18:12:21,413 INFO L290 TraceCheckUtils]: 23: Hoare triple {3471#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {3471#true} is VALID [2022-02-20 18:12:21,413 INFO L290 TraceCheckUtils]: 24: Hoare triple {3471#true} assume !(0 != ~pumpRunning~0); {3471#true} is VALID [2022-02-20 18:12:21,413 INFO L290 TraceCheckUtils]: 25: Hoare triple {3471#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {3471#true} is VALID [2022-02-20 18:12:21,427 INFO L290 TraceCheckUtils]: 26: Hoare triple {3471#true} assume !(0 != ~pumpRunning~0); {3471#true} is VALID [2022-02-20 18:12:21,428 INFO L272 TraceCheckUtils]: 27: Hoare triple {3471#true} call processEnvironment__wrappee__highWaterSensor(); {3490#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:21,428 INFO L290 TraceCheckUtils]: 28: Hoare triple {3490#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3471#true} is VALID [2022-02-20 18:12:21,428 INFO L290 TraceCheckUtils]: 29: Hoare triple {3471#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {3471#true} is VALID [2022-02-20 18:12:21,429 INFO L290 TraceCheckUtils]: 30: Hoare triple {3471#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {3491#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:12:21,429 INFO L290 TraceCheckUtils]: 31: Hoare triple {3491#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {3492#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|) 0)} is VALID [2022-02-20 18:12:21,430 INFO L290 TraceCheckUtils]: 32: Hoare triple {3492#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {3472#false} is VALID [2022-02-20 18:12:21,430 INFO L290 TraceCheckUtils]: 33: Hoare triple {3472#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {3472#false} is VALID [2022-02-20 18:12:21,430 INFO L290 TraceCheckUtils]: 34: Hoare triple {3472#false} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {3472#false} is VALID [2022-02-20 18:12:21,430 INFO L290 TraceCheckUtils]: 35: Hoare triple {3472#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3472#false} is VALID [2022-02-20 18:12:21,430 INFO L290 TraceCheckUtils]: 36: Hoare triple {3472#false} assume { :end_inline_activatePump } true; {3472#false} is VALID [2022-02-20 18:12:21,431 INFO L290 TraceCheckUtils]: 37: Hoare triple {3472#false} assume true; {3472#false} is VALID [2022-02-20 18:12:21,431 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {3472#false} {3471#true} #247#return; {3472#false} is VALID [2022-02-20 18:12:21,431 INFO L290 TraceCheckUtils]: 39: Hoare triple {3472#false} assume { :end_inline_processEnvironment } true; {3472#false} is VALID [2022-02-20 18:12:21,431 INFO L290 TraceCheckUtils]: 40: Hoare triple {3472#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {3472#false} is VALID [2022-02-20 18:12:21,431 INFO L290 TraceCheckUtils]: 41: Hoare triple {3472#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {3472#false} is VALID [2022-02-20 18:12:21,431 INFO L290 TraceCheckUtils]: 42: Hoare triple {3472#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {3472#false} is VALID [2022-02-20 18:12:21,432 INFO L272 TraceCheckUtils]: 43: Hoare triple {3472#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {3471#true} is VALID [2022-02-20 18:12:21,432 INFO L290 TraceCheckUtils]: 44: Hoare triple {3471#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {3471#true} is VALID [2022-02-20 18:12:21,432 INFO L290 TraceCheckUtils]: 45: Hoare triple {3471#true} assume true; {3471#true} is VALID [2022-02-20 18:12:21,432 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {3471#true} {3472#false} #249#return; {3472#false} is VALID [2022-02-20 18:12:21,432 INFO L290 TraceCheckUtils]: 47: Hoare triple {3472#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {3472#false} is VALID [2022-02-20 18:12:21,432 INFO L290 TraceCheckUtils]: 48: Hoare triple {3472#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {3472#false} is VALID [2022-02-20 18:12:21,432 INFO L290 TraceCheckUtils]: 49: Hoare triple {3472#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {3472#false} is VALID [2022-02-20 18:12:21,433 INFO L290 TraceCheckUtils]: 50: Hoare triple {3472#false} assume !false; {3472#false} is VALID [2022-02-20 18:12:21,433 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:21,433 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:21,433 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423303643] [2022-02-20 18:12:21,433 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423303643] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:21,434 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:21,434 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:21,434 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1143540276] [2022-02-20 18:12:21,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:21,435 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:21,435 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:21,435 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,486 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:21,487 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:21,487 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:21,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:21,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:21,488 INFO L87 Difference]: Start difference. First operand 149 states and 184 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:21,905 INFO L93 Difference]: Finished difference Result 300 states and 377 transitions. [2022-02-20 18:12:21,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:12:21,906 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:21,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:21,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 210 transitions. [2022-02-20 18:12:21,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:21,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 210 transitions. [2022-02-20 18:12:21,938 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 210 transitions. [2022-02-20 18:12:22,166 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 210 edges. 210 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:22,169 INFO L225 Difference]: With dead ends: 300 [2022-02-20 18:12:22,169 INFO L226 Difference]: Without dead ends: 159 [2022-02-20 18:12:22,170 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:22,171 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 68 mSDsluCounter, 207 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:22,171 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 304 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:22,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-02-20 18:12:22,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 151. [2022-02-20 18:12:22,187 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:22,188 INFO L82 GeneralOperation]: Start isEquivalent. First operand 159 states. Second operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:22,188 INFO L74 IsIncluded]: Start isIncluded. First operand 159 states. Second operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:22,189 INFO L87 Difference]: Start difference. First operand 159 states. Second operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:22,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:22,197 INFO L93 Difference]: Finished difference Result 159 states and 194 transitions. [2022-02-20 18:12:22,198 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2022-02-20 18:12:22,198 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:22,199 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:22,200 INFO L74 IsIncluded]: Start isIncluded. First operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 159 states. [2022-02-20 18:12:22,200 INFO L87 Difference]: Start difference. First operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 159 states. [2022-02-20 18:12:22,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:22,220 INFO L93 Difference]: Finished difference Result 159 states and 194 transitions. [2022-02-20 18:12:22,220 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2022-02-20 18:12:22,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:22,220 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:22,220 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:22,221 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:22,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:22,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2022-02-20 18:12:22,225 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 51 [2022-02-20 18:12:22,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:22,226 INFO L470 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2022-02-20 18:12:22,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:22,226 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2022-02-20 18:12:22,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:22,227 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:22,227 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:22,227 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:12:22,227 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:22,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:22,228 INFO L85 PathProgramCache]: Analyzing trace with hash -1685329373, now seen corresponding path program 1 times [2022-02-20 18:12:22,228 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:22,228 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841982398] [2022-02-20 18:12:22,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:22,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:22,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:22,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:22,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:22,296 INFO L290 TraceCheckUtils]: 0: Hoare triple {4441#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {4441#true} is VALID [2022-02-20 18:12:22,296 INFO L290 TraceCheckUtils]: 1: Hoare triple {4441#true} assume true; {4441#true} is VALID [2022-02-20 18:12:22,296 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4441#true} {4443#(= ~waterLevel~0 1)} #243#return; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:22,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:22,313 INFO L290 TraceCheckUtils]: 0: Hoare triple {4461#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {4441#true} is VALID [2022-02-20 18:12:22,314 INFO L290 TraceCheckUtils]: 1: Hoare triple {4441#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {4441#true} is VALID [2022-02-20 18:12:22,314 INFO L290 TraceCheckUtils]: 2: Hoare triple {4441#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,315 INFO L290 TraceCheckUtils]: 3: Hoare triple {4462#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,315 INFO L290 TraceCheckUtils]: 4: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,316 INFO L290 TraceCheckUtils]: 5: Hoare triple {4462#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,316 INFO L290 TraceCheckUtils]: 6: Hoare triple {4462#(<= 2 ~waterLevel~0)} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,316 INFO L290 TraceCheckUtils]: 7: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,317 INFO L290 TraceCheckUtils]: 8: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,317 INFO L290 TraceCheckUtils]: 9: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume true; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,317 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4462#(<= 2 ~waterLevel~0)} {4443#(= ~waterLevel~0 1)} #247#return; {4442#false} is VALID [2022-02-20 18:12:22,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:22,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:22,321 INFO L290 TraceCheckUtils]: 0: Hoare triple {4441#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {4441#true} is VALID [2022-02-20 18:12:22,321 INFO L290 TraceCheckUtils]: 1: Hoare triple {4441#true} assume true; {4441#true} is VALID [2022-02-20 18:12:22,321 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4441#true} {4442#false} #249#return; {4442#false} is VALID [2022-02-20 18:12:22,322 INFO L290 TraceCheckUtils]: 0: Hoare triple {4441#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,322 INFO L290 TraceCheckUtils]: 1: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,322 INFO L290 TraceCheckUtils]: 2: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,323 INFO L290 TraceCheckUtils]: 3: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,323 INFO L290 TraceCheckUtils]: 4: Hoare triple {4443#(= ~waterLevel~0 1)} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,323 INFO L290 TraceCheckUtils]: 5: Hoare triple {4443#(= ~waterLevel~0 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,324 INFO L290 TraceCheckUtils]: 6: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,324 INFO L290 TraceCheckUtils]: 7: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,324 INFO L290 TraceCheckUtils]: 8: Hoare triple {4443#(= ~waterLevel~0 1)} assume !false; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,325 INFO L290 TraceCheckUtils]: 9: Hoare triple {4443#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,325 INFO L290 TraceCheckUtils]: 10: Hoare triple {4443#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,326 INFO L290 TraceCheckUtils]: 11: Hoare triple {4443#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~4#1); {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,326 INFO L290 TraceCheckUtils]: 12: Hoare triple {4443#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,326 INFO L290 TraceCheckUtils]: 13: Hoare triple {4443#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2#1); {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,327 INFO L290 TraceCheckUtils]: 14: Hoare triple {4443#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,327 INFO L290 TraceCheckUtils]: 15: Hoare triple {4443#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,327 INFO L272 TraceCheckUtils]: 16: Hoare triple {4443#(= ~waterLevel~0 1)} call timeShift(); {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,328 INFO L290 TraceCheckUtils]: 17: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,328 INFO L272 TraceCheckUtils]: 18: Hoare triple {4443#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {4441#true} is VALID [2022-02-20 18:12:22,328 INFO L290 TraceCheckUtils]: 19: Hoare triple {4441#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {4441#true} is VALID [2022-02-20 18:12:22,328 INFO L290 TraceCheckUtils]: 20: Hoare triple {4441#true} assume true; {4441#true} is VALID [2022-02-20 18:12:22,329 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {4441#true} {4443#(= ~waterLevel~0 1)} #243#return; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,329 INFO L290 TraceCheckUtils]: 22: Hoare triple {4443#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,329 INFO L290 TraceCheckUtils]: 23: Hoare triple {4443#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,330 INFO L290 TraceCheckUtils]: 24: Hoare triple {4443#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,330 INFO L290 TraceCheckUtils]: 25: Hoare triple {4443#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,330 INFO L290 TraceCheckUtils]: 26: Hoare triple {4443#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {4443#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,331 INFO L272 TraceCheckUtils]: 27: Hoare triple {4443#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {4461#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:22,331 INFO L290 TraceCheckUtils]: 28: Hoare triple {4461#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {4441#true} is VALID [2022-02-20 18:12:22,331 INFO L290 TraceCheckUtils]: 29: Hoare triple {4441#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {4441#true} is VALID [2022-02-20 18:12:22,332 INFO L290 TraceCheckUtils]: 30: Hoare triple {4441#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,332 INFO L290 TraceCheckUtils]: 31: Hoare triple {4462#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,332 INFO L290 TraceCheckUtils]: 32: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,333 INFO L290 TraceCheckUtils]: 33: Hoare triple {4462#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,333 INFO L290 TraceCheckUtils]: 34: Hoare triple {4462#(<= 2 ~waterLevel~0)} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,333 INFO L290 TraceCheckUtils]: 35: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,334 INFO L290 TraceCheckUtils]: 36: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,334 INFO L290 TraceCheckUtils]: 37: Hoare triple {4462#(<= 2 ~waterLevel~0)} assume true; {4462#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:22,335 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {4462#(<= 2 ~waterLevel~0)} {4443#(= ~waterLevel~0 1)} #247#return; {4442#false} is VALID [2022-02-20 18:12:22,335 INFO L290 TraceCheckUtils]: 39: Hoare triple {4442#false} assume { :end_inline_processEnvironment } true; {4442#false} is VALID [2022-02-20 18:12:22,335 INFO L290 TraceCheckUtils]: 40: Hoare triple {4442#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {4442#false} is VALID [2022-02-20 18:12:22,335 INFO L290 TraceCheckUtils]: 41: Hoare triple {4442#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {4442#false} is VALID [2022-02-20 18:12:22,335 INFO L290 TraceCheckUtils]: 42: Hoare triple {4442#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {4442#false} is VALID [2022-02-20 18:12:22,336 INFO L272 TraceCheckUtils]: 43: Hoare triple {4442#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {4441#true} is VALID [2022-02-20 18:12:22,336 INFO L290 TraceCheckUtils]: 44: Hoare triple {4441#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {4441#true} is VALID [2022-02-20 18:12:22,336 INFO L290 TraceCheckUtils]: 45: Hoare triple {4441#true} assume true; {4441#true} is VALID [2022-02-20 18:12:22,336 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {4441#true} {4442#false} #249#return; {4442#false} is VALID [2022-02-20 18:12:22,336 INFO L290 TraceCheckUtils]: 47: Hoare triple {4442#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {4442#false} is VALID [2022-02-20 18:12:22,336 INFO L290 TraceCheckUtils]: 48: Hoare triple {4442#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {4442#false} is VALID [2022-02-20 18:12:22,336 INFO L290 TraceCheckUtils]: 49: Hoare triple {4442#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {4442#false} is VALID [2022-02-20 18:12:22,337 INFO L290 TraceCheckUtils]: 50: Hoare triple {4442#false} assume !false; {4442#false} is VALID [2022-02-20 18:12:22,337 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:22,337 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:22,337 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841982398] [2022-02-20 18:12:22,337 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841982398] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:22,337 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:22,338 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:22,338 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [444639249] [2022-02-20 18:12:22,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:22,338 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:22,339 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:22,339 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:22,374 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:22,375 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:22,375 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:22,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:22,376 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:22,376 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:22,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:22,932 INFO L93 Difference]: Finished difference Result 431 states and 551 transitions. [2022-02-20 18:12:22,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:22,932 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:22,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:22,933 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:22,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 359 transitions. [2022-02-20 18:12:22,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:22,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 359 transitions. [2022-02-20 18:12:22,941 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 359 transitions. [2022-02-20 18:12:23,260 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 359 edges. 359 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:23,268 INFO L225 Difference]: With dead ends: 431 [2022-02-20 18:12:23,269 INFO L226 Difference]: Without dead ends: 288 [2022-02-20 18:12:23,269 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:23,270 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 210 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:23,273 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [217 Valid, 318 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:23,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2022-02-20 18:12:23,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 280. [2022-02-20 18:12:23,323 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:23,323 INFO L82 GeneralOperation]: Start isEquivalent. First operand 288 states. Second operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:23,324 INFO L74 IsIncluded]: Start isIncluded. First operand 288 states. Second operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:23,325 INFO L87 Difference]: Start difference. First operand 288 states. Second operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:23,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:23,333 INFO L93 Difference]: Finished difference Result 288 states and 355 transitions. [2022-02-20 18:12:23,333 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 355 transitions. [2022-02-20 18:12:23,336 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:23,336 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:23,336 INFO L74 IsIncluded]: Start isIncluded. First operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 288 states. [2022-02-20 18:12:23,337 INFO L87 Difference]: Start difference. First operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 288 states. [2022-02-20 18:12:23,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:23,348 INFO L93 Difference]: Finished difference Result 288 states and 355 transitions. [2022-02-20 18:12:23,348 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 355 transitions. [2022-02-20 18:12:23,349 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:23,349 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:23,349 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:23,350 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:23,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:23,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 351 transitions. [2022-02-20 18:12:23,358 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 351 transitions. Word has length 51 [2022-02-20 18:12:23,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:23,359 INFO L470 AbstractCegarLoop]: Abstraction has 280 states and 351 transitions. [2022-02-20 18:12:23,359 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:23,359 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 351 transitions. [2022-02-20 18:12:23,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-02-20 18:12:23,360 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:23,360 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:23,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:12:23,361 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:23,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:23,361 INFO L85 PathProgramCache]: Analyzing trace with hash 716766725, now seen corresponding path program 1 times [2022-02-20 18:12:23,361 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:23,361 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982851996] [2022-02-20 18:12:23,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:23,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:23,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:23,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,436 INFO L290 TraceCheckUtils]: 0: Hoare triple {6028#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {6028#true} is VALID [2022-02-20 18:12:23,436 INFO L290 TraceCheckUtils]: 1: Hoare triple {6028#true} assume true; {6028#true} is VALID [2022-02-20 18:12:23,437 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6028#true} {6028#true} #243#return; {6028#true} is VALID [2022-02-20 18:12:23,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:23,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:12:23,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,454 INFO L290 TraceCheckUtils]: 0: Hoare triple {6028#true} assume true; {6028#true} is VALID [2022-02-20 18:12:23,454 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {6028#true} {6033#(= ~pumpRunning~0 0)} #259#return; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,455 INFO L290 TraceCheckUtils]: 0: Hoare triple {6052#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {6028#true} is VALID [2022-02-20 18:12:23,455 INFO L290 TraceCheckUtils]: 1: Hoare triple {6028#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,455 INFO L290 TraceCheckUtils]: 2: Hoare triple {6033#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,456 INFO L290 TraceCheckUtils]: 3: Hoare triple {6033#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,456 INFO L290 TraceCheckUtils]: 4: Hoare triple {6033#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~2#1;isHighWaterLevel_~tmp___0~0#1 := 0; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,456 INFO L290 TraceCheckUtils]: 5: Hoare triple {6033#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,457 INFO L290 TraceCheckUtils]: 6: Hoare triple {6033#(= ~pumpRunning~0 0)} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,457 INFO L290 TraceCheckUtils]: 7: Hoare triple {6033#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~0#1); {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,457 INFO L272 TraceCheckUtils]: 8: Hoare triple {6033#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {6028#true} is VALID [2022-02-20 18:12:23,457 INFO L290 TraceCheckUtils]: 9: Hoare triple {6028#true} assume true; {6028#true} is VALID [2022-02-20 18:12:23,458 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {6028#true} {6033#(= ~pumpRunning~0 0)} #259#return; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,458 INFO L290 TraceCheckUtils]: 11: Hoare triple {6033#(= ~pumpRunning~0 0)} assume true; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,459 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {6033#(= ~pumpRunning~0 0)} {6033#(= ~pumpRunning~0 0)} #247#return; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-02-20 18:12:23,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,468 INFO L290 TraceCheckUtils]: 0: Hoare triple {6028#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:23,469 INFO L290 TraceCheckUtils]: 1: Hoare triple {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:23,469 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} {6033#(= ~pumpRunning~0 0)} #249#return; {6050#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret53#1|)} is VALID [2022-02-20 18:12:23,469 INFO L290 TraceCheckUtils]: 0: Hoare triple {6028#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 1: Hoare triple {6028#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 2: Hoare triple {6028#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 3: Hoare triple {6028#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 4: Hoare triple {6028#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 5: Hoare triple {6028#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 6: Hoare triple {6028#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {6028#true} is VALID [2022-02-20 18:12:23,470 INFO L290 TraceCheckUtils]: 7: Hoare triple {6028#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 8: Hoare triple {6028#true} assume !false; {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 9: Hoare triple {6028#true} assume test_~splverifierCounter~0#1 < 4; {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 10: Hoare triple {6028#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 11: Hoare triple {6028#true} assume !(0 != test_~tmp~4#1); {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 12: Hoare triple {6028#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 13: Hoare triple {6028#true} assume !(0 != test_~tmp___0~2#1); {6028#true} is VALID [2022-02-20 18:12:23,471 INFO L290 TraceCheckUtils]: 14: Hoare triple {6028#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L290 TraceCheckUtils]: 15: Hoare triple {6028#true} assume 0 != test_~tmp___2~0#1; {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L272 TraceCheckUtils]: 16: Hoare triple {6028#true} call timeShift(); {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L290 TraceCheckUtils]: 17: Hoare triple {6028#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L272 TraceCheckUtils]: 18: Hoare triple {6028#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L290 TraceCheckUtils]: 19: Hoare triple {6028#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L290 TraceCheckUtils]: 20: Hoare triple {6028#true} assume true; {6028#true} is VALID [2022-02-20 18:12:23,472 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {6028#true} {6028#true} #243#return; {6028#true} is VALID [2022-02-20 18:12:23,473 INFO L290 TraceCheckUtils]: 22: Hoare triple {6028#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {6028#true} is VALID [2022-02-20 18:12:23,473 INFO L290 TraceCheckUtils]: 23: Hoare triple {6028#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {6028#true} is VALID [2022-02-20 18:12:23,473 INFO L290 TraceCheckUtils]: 24: Hoare triple {6028#true} assume !(0 != ~pumpRunning~0); {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,473 INFO L290 TraceCheckUtils]: 25: Hoare triple {6033#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,474 INFO L290 TraceCheckUtils]: 26: Hoare triple {6033#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,474 INFO L272 TraceCheckUtils]: 27: Hoare triple {6033#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {6052#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:23,474 INFO L290 TraceCheckUtils]: 28: Hoare triple {6052#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {6028#true} is VALID [2022-02-20 18:12:23,475 INFO L290 TraceCheckUtils]: 29: Hoare triple {6028#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,475 INFO L290 TraceCheckUtils]: 30: Hoare triple {6033#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,475 INFO L290 TraceCheckUtils]: 31: Hoare triple {6033#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,476 INFO L290 TraceCheckUtils]: 32: Hoare triple {6033#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~2#1;isHighWaterLevel_~tmp___0~0#1 := 0; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,476 INFO L290 TraceCheckUtils]: 33: Hoare triple {6033#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,476 INFO L290 TraceCheckUtils]: 34: Hoare triple {6033#(= ~pumpRunning~0 0)} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,477 INFO L290 TraceCheckUtils]: 35: Hoare triple {6033#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~0#1); {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,477 INFO L272 TraceCheckUtils]: 36: Hoare triple {6033#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {6028#true} is VALID [2022-02-20 18:12:23,477 INFO L290 TraceCheckUtils]: 37: Hoare triple {6028#true} assume true; {6028#true} is VALID [2022-02-20 18:12:23,477 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {6028#true} {6033#(= ~pumpRunning~0 0)} #259#return; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,478 INFO L290 TraceCheckUtils]: 39: Hoare triple {6033#(= ~pumpRunning~0 0)} assume true; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,478 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {6033#(= ~pumpRunning~0 0)} {6033#(= ~pumpRunning~0 0)} #247#return; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,479 INFO L290 TraceCheckUtils]: 41: Hoare triple {6033#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,479 INFO L290 TraceCheckUtils]: 42: Hoare triple {6033#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,479 INFO L290 TraceCheckUtils]: 43: Hoare triple {6033#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,480 INFO L290 TraceCheckUtils]: 44: Hoare triple {6033#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {6033#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:23,480 INFO L272 TraceCheckUtils]: 45: Hoare triple {6033#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {6028#true} is VALID [2022-02-20 18:12:23,480 INFO L290 TraceCheckUtils]: 46: Hoare triple {6028#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:23,481 INFO L290 TraceCheckUtils]: 47: Hoare triple {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:23,481 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {6055#(= ~pumpRunning~0 |isPumpRunning_#res|)} {6033#(= ~pumpRunning~0 0)} #249#return; {6050#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret53#1|)} is VALID [2022-02-20 18:12:23,482 INFO L290 TraceCheckUtils]: 49: Hoare triple {6050#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret53#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {6051#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:12:23,482 INFO L290 TraceCheckUtils]: 50: Hoare triple {6051#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {6029#false} is VALID [2022-02-20 18:12:23,482 INFO L290 TraceCheckUtils]: 51: Hoare triple {6029#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {6029#false} is VALID [2022-02-20 18:12:23,482 INFO L290 TraceCheckUtils]: 52: Hoare triple {6029#false} assume !false; {6029#false} is VALID [2022-02-20 18:12:23,483 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:12:23,483 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:23,483 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982851996] [2022-02-20 18:12:23,483 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982851996] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:23,483 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:23,484 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:12:23,484 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2120044009] [2022-02-20 18:12:23,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:23,484 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-02-20 18:12:23,485 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:23,485 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:23,521 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:23,522 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:12:23,522 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:23,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:12:23,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:23,523 INFO L87 Difference]: Start difference. First operand 280 states and 351 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:24,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,150 INFO L93 Difference]: Finished difference Result 568 states and 723 transitions. [2022-02-20 18:12:24,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-20 18:12:24,151 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-02-20 18:12:24,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:24,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:24,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 278 transitions. [2022-02-20 18:12:24,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:24,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 278 transitions. [2022-02-20 18:12:24,158 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 278 transitions. [2022-02-20 18:12:24,387 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 278 edges. 278 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:24,396 INFO L225 Difference]: With dead ends: 568 [2022-02-20 18:12:24,396 INFO L226 Difference]: Without dead ends: 296 [2022-02-20 18:12:24,397 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:24,397 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 125 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 438 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:24,398 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 438 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:24,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-02-20 18:12:24,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 276. [2022-02-20 18:12:24,431 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:24,432 INFO L82 GeneralOperation]: Start isEquivalent. First operand 296 states. Second operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:24,432 INFO L74 IsIncluded]: Start isIncluded. First operand 296 states. Second operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:24,433 INFO L87 Difference]: Start difference. First operand 296 states. Second operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:24,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,442 INFO L93 Difference]: Finished difference Result 296 states and 367 transitions. [2022-02-20 18:12:24,442 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 367 transitions. [2022-02-20 18:12:24,443 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:24,443 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:24,445 INFO L74 IsIncluded]: Start isIncluded. First operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 296 states. [2022-02-20 18:12:24,445 INFO L87 Difference]: Start difference. First operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 296 states. [2022-02-20 18:12:24,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,454 INFO L93 Difference]: Finished difference Result 296 states and 367 transitions. [2022-02-20 18:12:24,454 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 367 transitions. [2022-02-20 18:12:24,455 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:24,455 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:24,455 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:24,456 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:24,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:24,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 339 transitions. [2022-02-20 18:12:24,466 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 339 transitions. Word has length 53 [2022-02-20 18:12:24,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:24,466 INFO L470 AbstractCegarLoop]: Abstraction has 276 states and 339 transitions. [2022-02-20 18:12:24,467 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:12:24,467 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 339 transitions. [2022-02-20 18:12:24,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:24,468 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:24,468 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:24,468 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:12:24,468 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:24,469 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:24,469 INFO L85 PathProgramCache]: Analyzing trace with hash -1754438647, now seen corresponding path program 1 times [2022-02-20 18:12:24,469 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:24,469 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963576520] [2022-02-20 18:12:24,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:24,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:24,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:24,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,573 INFO L290 TraceCheckUtils]: 0: Hoare triple {7862#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,574 INFO L290 TraceCheckUtils]: 1: Hoare triple {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,574 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {7838#(= ~waterLevel~0 1)} #251#return; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:24,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,579 INFO L290 TraceCheckUtils]: 0: Hoare triple {7836#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {7836#true} is VALID [2022-02-20 18:12:24,580 INFO L290 TraceCheckUtils]: 1: Hoare triple {7836#true} assume true; {7836#true} is VALID [2022-02-20 18:12:24,580 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7836#true} {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #243#return; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-02-20 18:12:24,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,605 INFO L290 TraceCheckUtils]: 0: Hoare triple {7864#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7836#true} is VALID [2022-02-20 18:12:24,605 INFO L290 TraceCheckUtils]: 1: Hoare triple {7836#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {7836#true} is VALID [2022-02-20 18:12:24,606 INFO L290 TraceCheckUtils]: 2: Hoare triple {7836#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,606 INFO L290 TraceCheckUtils]: 3: Hoare triple {7865#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,606 INFO L290 TraceCheckUtils]: 4: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,607 INFO L290 TraceCheckUtils]: 5: Hoare triple {7865#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,607 INFO L290 TraceCheckUtils]: 6: Hoare triple {7865#(not (<= ~waterLevel~0 1))} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,607 INFO L290 TraceCheckUtils]: 7: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,608 INFO L290 TraceCheckUtils]: 8: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,608 INFO L290 TraceCheckUtils]: 9: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume true; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,609 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {7865#(not (<= ~waterLevel~0 1))} {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #247#return; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:24,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,612 INFO L290 TraceCheckUtils]: 0: Hoare triple {7836#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {7836#true} is VALID [2022-02-20 18:12:24,613 INFO L290 TraceCheckUtils]: 1: Hoare triple {7836#true} assume true; {7836#true} is VALID [2022-02-20 18:12:24,613 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7836#true} {7837#false} #249#return; {7837#false} is VALID [2022-02-20 18:12:24,613 INFO L290 TraceCheckUtils]: 0: Hoare triple {7836#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,614 INFO L290 TraceCheckUtils]: 1: Hoare triple {7838#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,614 INFO L290 TraceCheckUtils]: 2: Hoare triple {7838#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,615 INFO L290 TraceCheckUtils]: 3: Hoare triple {7838#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,615 INFO L290 TraceCheckUtils]: 4: Hoare triple {7838#(= ~waterLevel~0 1)} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,615 INFO L290 TraceCheckUtils]: 5: Hoare triple {7838#(= ~waterLevel~0 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,616 INFO L290 TraceCheckUtils]: 6: Hoare triple {7838#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,616 INFO L290 TraceCheckUtils]: 7: Hoare triple {7838#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,617 INFO L290 TraceCheckUtils]: 8: Hoare triple {7838#(= ~waterLevel~0 1)} assume !false; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,617 INFO L290 TraceCheckUtils]: 9: Hoare triple {7838#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,617 INFO L290 TraceCheckUtils]: 10: Hoare triple {7838#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,618 INFO L290 TraceCheckUtils]: 11: Hoare triple {7838#(= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {7838#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:24,618 INFO L272 TraceCheckUtils]: 12: Hoare triple {7838#(= ~waterLevel~0 1)} call waterRise(); {7862#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:24,619 INFO L290 TraceCheckUtils]: 13: Hoare triple {7862#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,619 INFO L290 TraceCheckUtils]: 14: Hoare triple {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,620 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {7863#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {7838#(= ~waterLevel~0 1)} #251#return; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,621 INFO L290 TraceCheckUtils]: 16: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,621 INFO L290 TraceCheckUtils]: 17: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2#1); {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,621 INFO L290 TraceCheckUtils]: 18: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,622 INFO L290 TraceCheckUtils]: 19: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0#1; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,622 INFO L272 TraceCheckUtils]: 20: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call timeShift(); {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,623 INFO L290 TraceCheckUtils]: 21: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,623 INFO L272 TraceCheckUtils]: 22: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {7836#true} is VALID [2022-02-20 18:12:24,623 INFO L290 TraceCheckUtils]: 23: Hoare triple {7836#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {7836#true} is VALID [2022-02-20 18:12:24,623 INFO L290 TraceCheckUtils]: 24: Hoare triple {7836#true} assume true; {7836#true} is VALID [2022-02-20 18:12:24,624 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {7836#true} {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #243#return; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,624 INFO L290 TraceCheckUtils]: 26: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,625 INFO L290 TraceCheckUtils]: 27: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,625 INFO L290 TraceCheckUtils]: 28: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,626 INFO L290 TraceCheckUtils]: 29: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,626 INFO L290 TraceCheckUtils]: 30: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,626 INFO L272 TraceCheckUtils]: 31: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call processEnvironment__wrappee__highWaterSensor(); {7864#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:24,627 INFO L290 TraceCheckUtils]: 32: Hoare triple {7864#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7836#true} is VALID [2022-02-20 18:12:24,627 INFO L290 TraceCheckUtils]: 33: Hoare triple {7836#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {7836#true} is VALID [2022-02-20 18:12:24,627 INFO L290 TraceCheckUtils]: 34: Hoare triple {7836#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,628 INFO L290 TraceCheckUtils]: 35: Hoare triple {7865#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,628 INFO L290 TraceCheckUtils]: 36: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,629 INFO L290 TraceCheckUtils]: 37: Hoare triple {7865#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,629 INFO L290 TraceCheckUtils]: 38: Hoare triple {7865#(not (<= ~waterLevel~0 1))} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,629 INFO L290 TraceCheckUtils]: 39: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,630 INFO L290 TraceCheckUtils]: 40: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,630 INFO L290 TraceCheckUtils]: 41: Hoare triple {7865#(not (<= ~waterLevel~0 1))} assume true; {7865#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:24,630 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {7865#(not (<= ~waterLevel~0 1))} {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #247#return; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,631 INFO L290 TraceCheckUtils]: 43: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:24,631 INFO L290 TraceCheckUtils]: 44: Hoare triple {7842#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {7857#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:24,632 INFO L290 TraceCheckUtils]: 45: Hoare triple {7857#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {7858#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)} is VALID [2022-02-20 18:12:24,632 INFO L290 TraceCheckUtils]: 46: Hoare triple {7858#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {7837#false} is VALID [2022-02-20 18:12:24,632 INFO L272 TraceCheckUtils]: 47: Hoare triple {7837#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {7836#true} is VALID [2022-02-20 18:12:24,633 INFO L290 TraceCheckUtils]: 48: Hoare triple {7836#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {7836#true} is VALID [2022-02-20 18:12:24,633 INFO L290 TraceCheckUtils]: 49: Hoare triple {7836#true} assume true; {7836#true} is VALID [2022-02-20 18:12:24,633 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {7836#true} {7837#false} #249#return; {7837#false} is VALID [2022-02-20 18:12:24,633 INFO L290 TraceCheckUtils]: 51: Hoare triple {7837#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {7837#false} is VALID [2022-02-20 18:12:24,633 INFO L290 TraceCheckUtils]: 52: Hoare triple {7837#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {7837#false} is VALID [2022-02-20 18:12:24,633 INFO L290 TraceCheckUtils]: 53: Hoare triple {7837#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {7837#false} is VALID [2022-02-20 18:12:24,634 INFO L290 TraceCheckUtils]: 54: Hoare triple {7837#false} assume !false; {7837#false} is VALID [2022-02-20 18:12:24,634 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:24,634 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:24,634 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963576520] [2022-02-20 18:12:24,634 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963576520] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:24,635 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:24,635 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:24,635 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521900825] [2022-02-20 18:12:24,635 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:24,636 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:12:24,636 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:24,636 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:24,677 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:24,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:24,677 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:24,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:24,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:24,678 INFO L87 Difference]: Start difference. First operand 276 states and 339 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:26,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,817 INFO L93 Difference]: Finished difference Result 818 states and 1041 transitions. [2022-02-20 18:12:26,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-02-20 18:12:26,817 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:12:26,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:26,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:26,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 539 transitions. [2022-02-20 18:12:26,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:26,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 539 transitions. [2022-02-20 18:12:26,829 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 29 states and 539 transitions. [2022-02-20 18:12:27,265 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 539 edges. 539 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:27,328 INFO L225 Difference]: With dead ends: 818 [2022-02-20 18:12:27,328 INFO L226 Difference]: Without dead ends: 600 [2022-02-20 18:12:27,329 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2022-02-20 18:12:27,330 INFO L933 BasicCegarLoop]: 153 mSDtfsCounter, 497 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 660 mSolverCounterSat, 164 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 503 SdHoareTripleChecker+Valid, 777 SdHoareTripleChecker+Invalid, 824 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 164 IncrementalHoareTripleChecker+Valid, 660 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:27,330 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [503 Valid, 777 Invalid, 824 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [164 Valid, 660 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-02-20 18:12:27,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 600 states. [2022-02-20 18:12:27,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 600 to 513. [2022-02-20 18:12:27,460 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:27,462 INFO L82 GeneralOperation]: Start isEquivalent. First operand 600 states. Second operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:27,463 INFO L74 IsIncluded]: Start isIncluded. First operand 600 states. Second operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:27,463 INFO L87 Difference]: Start difference. First operand 600 states. Second operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:27,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,483 INFO L93 Difference]: Finished difference Result 600 states and 737 transitions. [2022-02-20 18:12:27,483 INFO L276 IsEmpty]: Start isEmpty. Operand 600 states and 737 transitions. [2022-02-20 18:12:27,485 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,485 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:27,486 INFO L74 IsIncluded]: Start isIncluded. First operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) Second operand 600 states. [2022-02-20 18:12:27,487 INFO L87 Difference]: Start difference. First operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) Second operand 600 states. [2022-02-20 18:12:27,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,507 INFO L93 Difference]: Finished difference Result 600 states and 737 transitions. [2022-02-20 18:12:27,508 INFO L276 IsEmpty]: Start isEmpty. Operand 600 states and 737 transitions. [2022-02-20 18:12:27,509 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,509 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:27,509 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:27,510 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:27,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:27,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 513 states to 513 states and 622 transitions. [2022-02-20 18:12:27,531 INFO L78 Accepts]: Start accepts. Automaton has 513 states and 622 transitions. Word has length 55 [2022-02-20 18:12:27,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:27,531 INFO L470 AbstractCegarLoop]: Abstraction has 513 states and 622 transitions. [2022-02-20 18:12:27,531 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:27,531 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 622 transitions. [2022-02-20 18:12:27,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-02-20 18:12:27,533 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:27,533 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:27,533 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:12:27,533 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:27,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:27,534 INFO L85 PathProgramCache]: Analyzing trace with hash 1281558822, now seen corresponding path program 1 times [2022-02-20 18:12:27,534 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:27,534 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1192259449] [2022-02-20 18:12:27,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:27,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:27,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:27,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,633 INFO L290 TraceCheckUtils]: 0: Hoare triple {11008#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10957#true} is VALID [2022-02-20 18:12:27,633 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,634 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10957#true} {10959#(= 1 ~systemActive~0)} #251#return; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:27,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:27,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,653 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,653 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,653 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:27,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:27,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,663 INFO L290 TraceCheckUtils]: 0: Hoare triple {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 2: Hoare triple {10957#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 3: Hoare triple {10957#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 4: Hoare triple {10957#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 5: Hoare triple {10957#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 6: Hoare triple {10957#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {10957#true} is VALID [2022-02-20 18:12:27,664 INFO L290 TraceCheckUtils]: 7: Hoare triple {10957#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10957#true} is VALID [2022-02-20 18:12:27,665 INFO L290 TraceCheckUtils]: 8: Hoare triple {10957#true} assume { :end_inline_activatePump } true; {10957#true} is VALID [2022-02-20 18:12:27,665 INFO L290 TraceCheckUtils]: 9: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,665 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {10957#true} {10957#true} #247#return; {10957#true} is VALID [2022-02-20 18:12:27,665 INFO L290 TraceCheckUtils]: 0: Hoare triple {11009#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:27,665 INFO L272 TraceCheckUtils]: 1: Hoare triple {10957#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:27,665 INFO L290 TraceCheckUtils]: 2: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L290 TraceCheckUtils]: 3: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L290 TraceCheckUtils]: 5: Hoare triple {10957#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L290 TraceCheckUtils]: 6: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L290 TraceCheckUtils]: 7: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L290 TraceCheckUtils]: 8: Hoare triple {10957#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {10957#true} is VALID [2022-02-20 18:12:27,666 INFO L290 TraceCheckUtils]: 9: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:27,667 INFO L272 TraceCheckUtils]: 10: Hoare triple {10957#true} call processEnvironment__wrappee__highWaterSensor(); {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:27,667 INFO L290 TraceCheckUtils]: 11: Hoare triple {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:27,667 INFO L290 TraceCheckUtils]: 12: Hoare triple {10957#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:27,667 INFO L290 TraceCheckUtils]: 13: Hoare triple {10957#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:27,667 INFO L290 TraceCheckUtils]: 14: Hoare triple {10957#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L290 TraceCheckUtils]: 15: Hoare triple {10957#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L290 TraceCheckUtils]: 16: Hoare triple {10957#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L290 TraceCheckUtils]: 17: Hoare triple {10957#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L290 TraceCheckUtils]: 18: Hoare triple {10957#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L290 TraceCheckUtils]: 19: Hoare triple {10957#true} assume { :end_inline_activatePump } true; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L290 TraceCheckUtils]: 20: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,668 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {10957#true} {10957#true} #247#return; {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L290 TraceCheckUtils]: 22: Hoare triple {10957#true} assume { :end_inline_processEnvironment } true; {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L290 TraceCheckUtils]: 23: Hoare triple {10957#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L290 TraceCheckUtils]: 24: Hoare triple {10957#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L290 TraceCheckUtils]: 25: Hoare triple {10957#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L290 TraceCheckUtils]: 26: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L290 TraceCheckUtils]: 27: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,669 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {10957#true} {10959#(= 1 ~systemActive~0)} #255#return; {10957#true} is VALID [2022-02-20 18:12:27,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:12:27,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,672 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,673 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,673 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:27,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-02-20 18:12:27,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:27,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,678 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,678 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {10957#true} {10957#true} #261#return; {10957#true} is VALID [2022-02-20 18:12:27,678 INFO L290 TraceCheckUtils]: 0: Hoare triple {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:27,678 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume !(0 == ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:27,678 INFO L272 TraceCheckUtils]: 2: Hoare triple {10957#true} call processEnvironment__wrappee__base(); {10957#true} is VALID [2022-02-20 18:12:27,678 INFO L290 TraceCheckUtils]: 3: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,678 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {10957#true} {10957#true} #261#return; {10957#true} is VALID [2022-02-20 18:12:27,679 INFO L290 TraceCheckUtils]: 5: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,679 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {10957#true} {10958#false} #245#return; {10958#false} is VALID [2022-02-20 18:12:27,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-02-20 18:12:27,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,682 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,682 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,682 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10957#true} {10958#false} #249#return; {10958#false} is VALID [2022-02-20 18:12:27,684 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,684 INFO L290 TraceCheckUtils]: 1: Hoare triple {10959#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,684 INFO L290 TraceCheckUtils]: 2: Hoare triple {10959#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,685 INFO L290 TraceCheckUtils]: 3: Hoare triple {10959#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,685 INFO L290 TraceCheckUtils]: 4: Hoare triple {10959#(= 1 ~systemActive~0)} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,685 INFO L290 TraceCheckUtils]: 5: Hoare triple {10959#(= 1 ~systemActive~0)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,686 INFO L290 TraceCheckUtils]: 6: Hoare triple {10959#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,686 INFO L290 TraceCheckUtils]: 7: Hoare triple {10959#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,687 INFO L290 TraceCheckUtils]: 8: Hoare triple {10959#(= 1 ~systemActive~0)} assume !false; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,687 INFO L290 TraceCheckUtils]: 9: Hoare triple {10959#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,687 INFO L290 TraceCheckUtils]: 10: Hoare triple {10959#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,688 INFO L290 TraceCheckUtils]: 11: Hoare triple {10959#(= 1 ~systemActive~0)} assume 0 != test_~tmp~4#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,688 INFO L272 TraceCheckUtils]: 12: Hoare triple {10959#(= 1 ~systemActive~0)} call waterRise(); {11008#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:27,688 INFO L290 TraceCheckUtils]: 13: Hoare triple {11008#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10957#true} is VALID [2022-02-20 18:12:27,688 INFO L290 TraceCheckUtils]: 14: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,689 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10957#true} {10959#(= 1 ~systemActive~0)} #251#return; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,689 INFO L290 TraceCheckUtils]: 16: Hoare triple {10959#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,690 INFO L290 TraceCheckUtils]: 17: Hoare triple {10959#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,690 INFO L290 TraceCheckUtils]: 18: Hoare triple {10959#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,690 INFO L290 TraceCheckUtils]: 19: Hoare triple {10959#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {10959#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:27,691 INFO L272 TraceCheckUtils]: 20: Hoare triple {10959#(= 1 ~systemActive~0)} call timeShift(); {11009#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:27,691 INFO L290 TraceCheckUtils]: 21: Hoare triple {11009#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:27,691 INFO L272 TraceCheckUtils]: 22: Hoare triple {10957#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:27,691 INFO L290 TraceCheckUtils]: 23: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,691 INFO L290 TraceCheckUtils]: 24: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,692 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:27,692 INFO L290 TraceCheckUtils]: 26: Hoare triple {10957#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:27,692 INFO L290 TraceCheckUtils]: 27: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10957#true} is VALID [2022-02-20 18:12:27,692 INFO L290 TraceCheckUtils]: 28: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:27,692 INFO L290 TraceCheckUtils]: 29: Hoare triple {10957#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {10957#true} is VALID [2022-02-20 18:12:27,692 INFO L290 TraceCheckUtils]: 30: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:27,693 INFO L272 TraceCheckUtils]: 31: Hoare triple {10957#true} call processEnvironment__wrappee__highWaterSensor(); {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:27,693 INFO L290 TraceCheckUtils]: 32: Hoare triple {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:27,693 INFO L290 TraceCheckUtils]: 33: Hoare triple {10957#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:27,693 INFO L290 TraceCheckUtils]: 34: Hoare triple {10957#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:27,693 INFO L290 TraceCheckUtils]: 35: Hoare triple {10957#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {10957#true} is VALID [2022-02-20 18:12:27,693 INFO L290 TraceCheckUtils]: 36: Hoare triple {10957#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 37: Hoare triple {10957#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 38: Hoare triple {10957#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 39: Hoare triple {10957#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 40: Hoare triple {10957#true} assume { :end_inline_activatePump } true; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 41: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {10957#true} {10957#true} #247#return; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 43: Hoare triple {10957#true} assume { :end_inline_processEnvironment } true; {10957#true} is VALID [2022-02-20 18:12:27,694 INFO L290 TraceCheckUtils]: 44: Hoare triple {10957#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {10957#true} is VALID [2022-02-20 18:12:27,695 INFO L290 TraceCheckUtils]: 45: Hoare triple {10957#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {10957#true} is VALID [2022-02-20 18:12:27,695 INFO L290 TraceCheckUtils]: 46: Hoare triple {10957#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {10957#true} is VALID [2022-02-20 18:12:27,695 INFO L290 TraceCheckUtils]: 47: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {10957#true} is VALID [2022-02-20 18:12:27,695 INFO L290 TraceCheckUtils]: 48: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,695 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {10957#true} {10959#(= 1 ~systemActive~0)} #255#return; {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 50: Hoare triple {10957#true} assume !false; {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 51: Hoare triple {10957#true} assume test_~splverifierCounter~0#1 < 4; {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 52: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 53: Hoare triple {10957#true} assume !(0 != test_~tmp~4#1); {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 54: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 55: Hoare triple {10957#true} assume !(0 != test_~tmp___0~2#1); {10957#true} is VALID [2022-02-20 18:12:27,696 INFO L290 TraceCheckUtils]: 56: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L290 TraceCheckUtils]: 57: Hoare triple {10957#true} assume 0 != test_~tmp___2~0#1; {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L272 TraceCheckUtils]: 58: Hoare triple {10957#true} call timeShift(); {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L290 TraceCheckUtils]: 59: Hoare triple {10957#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L272 TraceCheckUtils]: 60: Hoare triple {10957#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L290 TraceCheckUtils]: 61: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L290 TraceCheckUtils]: 62: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,697 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:27,698 INFO L290 TraceCheckUtils]: 64: Hoare triple {10957#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:27,698 INFO L290 TraceCheckUtils]: 65: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10957#true} is VALID [2022-02-20 18:12:27,698 INFO L290 TraceCheckUtils]: 66: Hoare triple {10957#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {10957#true} is VALID [2022-02-20 18:12:27,698 INFO L290 TraceCheckUtils]: 67: Hoare triple {10957#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10957#true} is VALID [2022-02-20 18:12:27,698 INFO L290 TraceCheckUtils]: 68: Hoare triple {10957#true} assume { :end_inline_lowerWaterLevel } true; {10957#true} is VALID [2022-02-20 18:12:27,698 INFO L290 TraceCheckUtils]: 69: Hoare triple {10957#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {10957#true} is VALID [2022-02-20 18:12:27,699 INFO L290 TraceCheckUtils]: 70: Hoare triple {10957#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {10957#true} is VALID [2022-02-20 18:12:27,699 INFO L290 TraceCheckUtils]: 71: Hoare triple {10957#true} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {10957#true} is VALID [2022-02-20 18:12:27,700 INFO L290 TraceCheckUtils]: 72: Hoare triple {10957#true} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {10995#(not (= |timeShift_isLowWaterLevel_~tmp___0~1#1| 0))} is VALID [2022-02-20 18:12:27,700 INFO L290 TraceCheckUtils]: 73: Hoare triple {10995#(not (= |timeShift_isLowWaterLevel_~tmp___0~1#1| 0))} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {10996#(not (= |timeShift_isLowWaterLevel_#res#1| 0))} is VALID [2022-02-20 18:12:27,700 INFO L290 TraceCheckUtils]: 74: Hoare triple {10996#(not (= |timeShift_isLowWaterLevel_#res#1| 0))} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {10997#(not (= |timeShift_processEnvironment_~tmp~1#1| 0))} is VALID [2022-02-20 18:12:27,701 INFO L290 TraceCheckUtils]: 75: Hoare triple {10997#(not (= |timeShift_processEnvironment_~tmp~1#1| 0))} assume !(0 != processEnvironment_~tmp~1#1); {10958#false} is VALID [2022-02-20 18:12:27,701 INFO L272 TraceCheckUtils]: 76: Hoare triple {10958#false} call processEnvironment__wrappee__highWaterSensor(); {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:27,701 INFO L290 TraceCheckUtils]: 77: Hoare triple {11024#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:27,701 INFO L290 TraceCheckUtils]: 78: Hoare triple {10957#true} assume !(0 == ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:27,701 INFO L272 TraceCheckUtils]: 79: Hoare triple {10957#true} call processEnvironment__wrappee__base(); {10957#true} is VALID [2022-02-20 18:12:27,702 INFO L290 TraceCheckUtils]: 80: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,702 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {10957#true} {10957#true} #261#return; {10957#true} is VALID [2022-02-20 18:12:27,702 INFO L290 TraceCheckUtils]: 82: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,702 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {10957#true} {10958#false} #245#return; {10958#false} is VALID [2022-02-20 18:12:27,702 INFO L290 TraceCheckUtils]: 84: Hoare triple {10958#false} assume { :end_inline_processEnvironment } true; {10958#false} is VALID [2022-02-20 18:12:27,702 INFO L290 TraceCheckUtils]: 85: Hoare triple {10958#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {10958#false} is VALID [2022-02-20 18:12:27,702 INFO L290 TraceCheckUtils]: 86: Hoare triple {10958#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {10958#false} is VALID [2022-02-20 18:12:27,703 INFO L290 TraceCheckUtils]: 87: Hoare triple {10958#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {10958#false} is VALID [2022-02-20 18:12:27,703 INFO L272 TraceCheckUtils]: 88: Hoare triple {10958#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:27,703 INFO L290 TraceCheckUtils]: 89: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:27,703 INFO L290 TraceCheckUtils]: 90: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:27,703 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {10957#true} {10958#false} #249#return; {10958#false} is VALID [2022-02-20 18:12:27,703 INFO L290 TraceCheckUtils]: 92: Hoare triple {10958#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {10958#false} is VALID [2022-02-20 18:12:27,703 INFO L290 TraceCheckUtils]: 93: Hoare triple {10958#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {10958#false} is VALID [2022-02-20 18:12:27,704 INFO L290 TraceCheckUtils]: 94: Hoare triple {10958#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10958#false} is VALID [2022-02-20 18:12:27,704 INFO L290 TraceCheckUtils]: 95: Hoare triple {10958#false} assume !false; {10958#false} is VALID [2022-02-20 18:12:27,704 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 4 proven. 10 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-02-20 18:12:27,704 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:27,704 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1192259449] [2022-02-20 18:12:27,705 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1192259449] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:27,705 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1697572488] [2022-02-20 18:12:27,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:27,705 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:27,705 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:27,707 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:27,757 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:12:27,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,835 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:12:27,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,863 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:28,279 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {10957#true} is VALID [2022-02-20 18:12:28,279 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {10957#true} is VALID [2022-02-20 18:12:28,279 INFO L290 TraceCheckUtils]: 2: Hoare triple {10957#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10957#true} is VALID [2022-02-20 18:12:28,279 INFO L290 TraceCheckUtils]: 3: Hoare triple {10957#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {10957#true} is VALID [2022-02-20 18:12:28,280 INFO L290 TraceCheckUtils]: 4: Hoare triple {10957#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {10957#true} is VALID [2022-02-20 18:12:28,280 INFO L290 TraceCheckUtils]: 5: Hoare triple {10957#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {10957#true} is VALID [2022-02-20 18:12:28,280 INFO L290 TraceCheckUtils]: 6: Hoare triple {10957#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10957#true} is VALID [2022-02-20 18:12:28,280 INFO L290 TraceCheckUtils]: 7: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10957#true} is VALID [2022-02-20 18:12:28,280 INFO L290 TraceCheckUtils]: 8: Hoare triple {10957#true} assume !false; {10957#true} is VALID [2022-02-20 18:12:28,280 INFO L290 TraceCheckUtils]: 9: Hoare triple {10957#true} assume test_~splverifierCounter~0#1 < 4; {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L290 TraceCheckUtils]: 10: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L290 TraceCheckUtils]: 11: Hoare triple {10957#true} assume 0 != test_~tmp~4#1; {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L272 TraceCheckUtils]: 12: Hoare triple {10957#true} call waterRise(); {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L290 TraceCheckUtils]: 13: Hoare triple {10957#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L290 TraceCheckUtils]: 14: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10957#true} {10957#true} #251#return; {10957#true} is VALID [2022-02-20 18:12:28,281 INFO L290 TraceCheckUtils]: 16: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {10957#true} is VALID [2022-02-20 18:12:28,282 INFO L290 TraceCheckUtils]: 17: Hoare triple {10957#true} assume !(0 != test_~tmp___0~2#1); {10957#true} is VALID [2022-02-20 18:12:28,282 INFO L290 TraceCheckUtils]: 18: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {10957#true} is VALID [2022-02-20 18:12:28,282 INFO L290 TraceCheckUtils]: 19: Hoare triple {10957#true} assume 0 != test_~tmp___2~0#1; {10957#true} is VALID [2022-02-20 18:12:28,282 INFO L272 TraceCheckUtils]: 20: Hoare triple {10957#true} call timeShift(); {10957#true} is VALID [2022-02-20 18:12:28,282 INFO L290 TraceCheckUtils]: 21: Hoare triple {10957#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:28,282 INFO L272 TraceCheckUtils]: 22: Hoare triple {10957#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L290 TraceCheckUtils]: 23: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L290 TraceCheckUtils]: 24: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L290 TraceCheckUtils]: 26: Hoare triple {10957#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L290 TraceCheckUtils]: 27: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L290 TraceCheckUtils]: 28: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:28,283 INFO L290 TraceCheckUtils]: 29: Hoare triple {10957#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L290 TraceCheckUtils]: 30: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L272 TraceCheckUtils]: 31: Hoare triple {10957#true} call processEnvironment__wrappee__highWaterSensor(); {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L290 TraceCheckUtils]: 32: Hoare triple {10957#true} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L290 TraceCheckUtils]: 33: Hoare triple {10957#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L290 TraceCheckUtils]: 34: Hoare triple {10957#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L290 TraceCheckUtils]: 35: Hoare triple {10957#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {10957#true} is VALID [2022-02-20 18:12:28,284 INFO L290 TraceCheckUtils]: 36: Hoare triple {10957#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10957#true} is VALID [2022-02-20 18:12:28,285 INFO L290 TraceCheckUtils]: 37: Hoare triple {10957#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {10957#true} is VALID [2022-02-20 18:12:28,285 INFO L290 TraceCheckUtils]: 38: Hoare triple {10957#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {10957#true} is VALID [2022-02-20 18:12:28,285 INFO L290 TraceCheckUtils]: 39: Hoare triple {10957#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,286 INFO L290 TraceCheckUtils]: 40: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,286 INFO L290 TraceCheckUtils]: 41: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,287 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {11147#(<= 1 ~pumpRunning~0)} {10957#true} #247#return; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,287 INFO L290 TraceCheckUtils]: 43: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,287 INFO L290 TraceCheckUtils]: 44: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,288 INFO L290 TraceCheckUtils]: 45: Hoare triple {11147#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,288 INFO L290 TraceCheckUtils]: 46: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,288 INFO L290 TraceCheckUtils]: 47: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,289 INFO L290 TraceCheckUtils]: 48: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,289 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {11147#(<= 1 ~pumpRunning~0)} {10957#true} #255#return; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,289 INFO L290 TraceCheckUtils]: 50: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !false; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,290 INFO L290 TraceCheckUtils]: 51: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,290 INFO L290 TraceCheckUtils]: 52: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,290 INFO L290 TraceCheckUtils]: 53: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~4#1); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,291 INFO L290 TraceCheckUtils]: 54: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,291 INFO L290 TraceCheckUtils]: 55: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2#1); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,291 INFO L290 TraceCheckUtils]: 56: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,292 INFO L290 TraceCheckUtils]: 57: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,292 INFO L272 TraceCheckUtils]: 58: Hoare triple {11147#(<= 1 ~pumpRunning~0)} call timeShift(); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,293 INFO L290 TraceCheckUtils]: 59: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,293 INFO L272 TraceCheckUtils]: 60: Hoare triple {11147#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,293 INFO L290 TraceCheckUtils]: 61: Hoare triple {11147#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {11214#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:28,294 INFO L290 TraceCheckUtils]: 62: Hoare triple {11214#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {11214#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:28,295 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {11214#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {11147#(<= 1 ~pumpRunning~0)} #243#return; {11221#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret51#1|)} is VALID [2022-02-20 18:12:28,295 INFO L290 TraceCheckUtils]: 64: Hoare triple {11221#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret51#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,296 INFO L290 TraceCheckUtils]: 65: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,296 INFO L290 TraceCheckUtils]: 66: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,296 INFO L290 TraceCheckUtils]: 67: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,297 INFO L290 TraceCheckUtils]: 68: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,297 INFO L290 TraceCheckUtils]: 69: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,297 INFO L290 TraceCheckUtils]: 70: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,298 INFO L290 TraceCheckUtils]: 71: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,298 INFO L290 TraceCheckUtils]: 72: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,298 INFO L290 TraceCheckUtils]: 73: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,299 INFO L290 TraceCheckUtils]: 74: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,299 INFO L290 TraceCheckUtils]: 75: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~1#1); {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,299 INFO L272 TraceCheckUtils]: 76: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,300 INFO L290 TraceCheckUtils]: 77: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} havoc ~tmp~0#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,300 INFO L290 TraceCheckUtils]: 78: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,301 INFO L272 TraceCheckUtils]: 79: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,301 INFO L290 TraceCheckUtils]: 80: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,301 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {11225#(<= 1 ~switchedOnBeforeTS~0)} {11225#(<= 1 ~switchedOnBeforeTS~0)} #261#return; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,302 INFO L290 TraceCheckUtils]: 82: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,302 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {11225#(<= 1 ~switchedOnBeforeTS~0)} {11225#(<= 1 ~switchedOnBeforeTS~0)} #245#return; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,302 INFO L290 TraceCheckUtils]: 84: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,303 INFO L290 TraceCheckUtils]: 85: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,303 INFO L290 TraceCheckUtils]: 86: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,303 INFO L290 TraceCheckUtils]: 87: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,304 INFO L272 TraceCheckUtils]: 88: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,304 INFO L290 TraceCheckUtils]: 89: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,305 INFO L290 TraceCheckUtils]: 90: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,305 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {11225#(<= 1 ~switchedOnBeforeTS~0)} {11225#(<= 1 ~switchedOnBeforeTS~0)} #249#return; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,305 INFO L290 TraceCheckUtils]: 92: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,306 INFO L290 TraceCheckUtils]: 93: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,306 INFO L290 TraceCheckUtils]: 94: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10958#false} is VALID [2022-02-20 18:12:28,306 INFO L290 TraceCheckUtils]: 95: Hoare triple {10958#false} assume !false; {10958#false} is VALID [2022-02-20 18:12:28,307 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:12:28,307 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:28,877 INFO L290 TraceCheckUtils]: 95: Hoare triple {10958#false} assume !false; {10958#false} is VALID [2022-02-20 18:12:28,878 INFO L290 TraceCheckUtils]: 94: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10958#false} is VALID [2022-02-20 18:12:28,878 INFO L290 TraceCheckUtils]: 93: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,878 INFO L290 TraceCheckUtils]: 92: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,879 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {10957#true} {11225#(<= 1 ~switchedOnBeforeTS~0)} #249#return; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,879 INFO L290 TraceCheckUtils]: 90: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,879 INFO L290 TraceCheckUtils]: 89: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:28,880 INFO L272 TraceCheckUtils]: 88: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:28,880 INFO L290 TraceCheckUtils]: 87: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,880 INFO L290 TraceCheckUtils]: 86: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,881 INFO L290 TraceCheckUtils]: 85: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,881 INFO L290 TraceCheckUtils]: 84: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,882 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {10957#true} {11225#(<= 1 ~switchedOnBeforeTS~0)} #245#return; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,882 INFO L290 TraceCheckUtils]: 82: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,882 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {10957#true} {10957#true} #261#return; {10957#true} is VALID [2022-02-20 18:12:28,882 INFO L290 TraceCheckUtils]: 80: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,882 INFO L272 TraceCheckUtils]: 79: Hoare triple {10957#true} call processEnvironment__wrappee__base(); {10957#true} is VALID [2022-02-20 18:12:28,882 INFO L290 TraceCheckUtils]: 78: Hoare triple {10957#true} assume !(0 == ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:28,882 INFO L290 TraceCheckUtils]: 77: Hoare triple {10957#true} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:28,883 INFO L272 TraceCheckUtils]: 76: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {10957#true} is VALID [2022-02-20 18:12:28,883 INFO L290 TraceCheckUtils]: 75: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~1#1); {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,883 INFO L290 TraceCheckUtils]: 74: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,884 INFO L290 TraceCheckUtils]: 73: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,884 INFO L290 TraceCheckUtils]: 72: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,885 INFO L290 TraceCheckUtils]: 71: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,885 INFO L290 TraceCheckUtils]: 70: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,885 INFO L290 TraceCheckUtils]: 69: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,886 INFO L290 TraceCheckUtils]: 68: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,886 INFO L290 TraceCheckUtils]: 67: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,887 INFO L290 TraceCheckUtils]: 66: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,887 INFO L290 TraceCheckUtils]: 65: Hoare triple {11225#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,888 INFO L290 TraceCheckUtils]: 64: Hoare triple {11221#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret51#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {11225#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:28,888 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {11418#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {11147#(<= 1 ~pumpRunning~0)} #243#return; {11221#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret51#1|)} is VALID [2022-02-20 18:12:28,889 INFO L290 TraceCheckUtils]: 62: Hoare triple {11418#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {11418#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:28,889 INFO L290 TraceCheckUtils]: 61: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {11418#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:28,889 INFO L272 TraceCheckUtils]: 60: Hoare triple {11147#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:28,890 INFO L290 TraceCheckUtils]: 59: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,890 INFO L272 TraceCheckUtils]: 58: Hoare triple {11147#(<= 1 ~pumpRunning~0)} call timeShift(); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,890 INFO L290 TraceCheckUtils]: 57: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,891 INFO L290 TraceCheckUtils]: 56: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,891 INFO L290 TraceCheckUtils]: 55: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2#1); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,892 INFO L290 TraceCheckUtils]: 54: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,892 INFO L290 TraceCheckUtils]: 53: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~4#1); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,892 INFO L290 TraceCheckUtils]: 52: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,893 INFO L290 TraceCheckUtils]: 51: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,893 INFO L290 TraceCheckUtils]: 50: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !false; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,894 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {11147#(<= 1 ~pumpRunning~0)} {10957#true} #255#return; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,894 INFO L290 TraceCheckUtils]: 48: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,894 INFO L290 TraceCheckUtils]: 47: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,895 INFO L290 TraceCheckUtils]: 46: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,895 INFO L290 TraceCheckUtils]: 45: Hoare triple {11147#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,895 INFO L290 TraceCheckUtils]: 44: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,896 INFO L290 TraceCheckUtils]: 43: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,896 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {11147#(<= 1 ~pumpRunning~0)} {10957#true} #247#return; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,896 INFO L290 TraceCheckUtils]: 41: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,897 INFO L290 TraceCheckUtils]: 40: Hoare triple {11147#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,897 INFO L290 TraceCheckUtils]: 39: Hoare triple {10957#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11147#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:28,897 INFO L290 TraceCheckUtils]: 38: Hoare triple {10957#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L290 TraceCheckUtils]: 37: Hoare triple {10957#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L290 TraceCheckUtils]: 36: Hoare triple {10957#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L290 TraceCheckUtils]: 35: Hoare triple {10957#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L290 TraceCheckUtils]: 34: Hoare triple {10957#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L290 TraceCheckUtils]: 33: Hoare triple {10957#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L290 TraceCheckUtils]: 32: Hoare triple {10957#true} havoc ~tmp~0#1; {10957#true} is VALID [2022-02-20 18:12:28,898 INFO L272 TraceCheckUtils]: 31: Hoare triple {10957#true} call processEnvironment__wrappee__highWaterSensor(); {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L290 TraceCheckUtils]: 30: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L290 TraceCheckUtils]: 29: Hoare triple {10957#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L290 TraceCheckUtils]: 28: Hoare triple {10957#true} assume !(0 != ~pumpRunning~0); {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L290 TraceCheckUtils]: 27: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L290 TraceCheckUtils]: 26: Hoare triple {10957#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10957#true} {10957#true} #243#return; {10957#true} is VALID [2022-02-20 18:12:28,899 INFO L290 TraceCheckUtils]: 24: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L290 TraceCheckUtils]: 23: Hoare triple {10957#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L272 TraceCheckUtils]: 22: Hoare triple {10957#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L290 TraceCheckUtils]: 21: Hoare triple {10957#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L272 TraceCheckUtils]: 20: Hoare triple {10957#true} call timeShift(); {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L290 TraceCheckUtils]: 19: Hoare triple {10957#true} assume 0 != test_~tmp___2~0#1; {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L290 TraceCheckUtils]: 18: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {10957#true} is VALID [2022-02-20 18:12:28,900 INFO L290 TraceCheckUtils]: 17: Hoare triple {10957#true} assume !(0 != test_~tmp___0~2#1); {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L290 TraceCheckUtils]: 16: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10957#true} {10957#true} #251#return; {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L290 TraceCheckUtils]: 14: Hoare triple {10957#true} assume true; {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L290 TraceCheckUtils]: 13: Hoare triple {10957#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L272 TraceCheckUtils]: 12: Hoare triple {10957#true} call waterRise(); {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L290 TraceCheckUtils]: 11: Hoare triple {10957#true} assume 0 != test_~tmp~4#1; {10957#true} is VALID [2022-02-20 18:12:28,901 INFO L290 TraceCheckUtils]: 10: Hoare triple {10957#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 9: Hoare triple {10957#true} assume test_~splverifierCounter~0#1 < 4; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 8: Hoare triple {10957#true} assume !false; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 7: Hoare triple {10957#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 6: Hoare triple {10957#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 5: Hoare triple {10957#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 4: Hoare triple {10957#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {10957#true} is VALID [2022-02-20 18:12:28,902 INFO L290 TraceCheckUtils]: 3: Hoare triple {10957#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {10957#true} is VALID [2022-02-20 18:12:28,903 INFO L290 TraceCheckUtils]: 2: Hoare triple {10957#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10957#true} is VALID [2022-02-20 18:12:28,903 INFO L290 TraceCheckUtils]: 1: Hoare triple {10957#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {10957#true} is VALID [2022-02-20 18:12:28,903 INFO L290 TraceCheckUtils]: 0: Hoare triple {10957#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {10957#true} is VALID [2022-02-20 18:12:28,903 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:28,904 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1697572488] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:28,904 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:28,904 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2022-02-20 18:12:28,904 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1912074027] [2022-02-20 18:12:28,904 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:28,905 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) Word has length 96 [2022-02-20 18:12:28,906 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:28,906 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2022-02-20 18:12:29,026 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 163 edges. 163 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:29,026 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-02-20 18:12:29,027 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:29,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-02-20 18:12:29,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:12:29,028 INFO L87 Difference]: Start difference. First operand 513 states and 622 transitions. Second operand has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2022-02-20 18:12:32,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:32,782 INFO L93 Difference]: Finished difference Result 1141 states and 1423 transitions. [2022-02-20 18:12:32,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-02-20 18:12:32,783 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) Word has length 96 [2022-02-20 18:12:32,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:32,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2022-02-20 18:12:32,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 424 transitions. [2022-02-20 18:12:32,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2022-02-20 18:12:32,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 424 transitions. [2022-02-20 18:12:32,792 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 34 states and 424 transitions. [2022-02-20 18:12:33,086 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:33,118 INFO L225 Difference]: With dead ends: 1141 [2022-02-20 18:12:33,118 INFO L226 Difference]: Without dead ends: 684 [2022-02-20 18:12:33,120 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 260 GetRequests, 216 SyntacticMatches, 1 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 436 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=421, Invalid=1559, Unknown=0, NotChecked=0, Total=1980 [2022-02-20 18:12:33,120 INFO L933 BasicCegarLoop]: 205 mSDtfsCounter, 474 mSDsluCounter, 1184 mSDsCounter, 0 mSdLazyCounter, 1020 mSolverCounterSat, 213 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 477 SdHoareTripleChecker+Valid, 1389 SdHoareTripleChecker+Invalid, 1233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 213 IncrementalHoareTripleChecker+Valid, 1020 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:33,121 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [477 Valid, 1389 Invalid, 1233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [213 Valid, 1020 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-02-20 18:12:33,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 684 states. [2022-02-20 18:12:33,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 684 to 580. [2022-02-20 18:12:33,388 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:33,389 INFO L82 GeneralOperation]: Start isEquivalent. First operand 684 states. Second operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) [2022-02-20 18:12:33,390 INFO L74 IsIncluded]: Start isIncluded. First operand 684 states. Second operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) [2022-02-20 18:12:33,391 INFO L87 Difference]: Start difference. First operand 684 states. Second operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) [2022-02-20 18:12:33,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:33,415 INFO L93 Difference]: Finished difference Result 684 states and 835 transitions. [2022-02-20 18:12:33,415 INFO L276 IsEmpty]: Start isEmpty. Operand 684 states and 835 transitions. [2022-02-20 18:12:33,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:33,417 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:33,418 INFO L74 IsIncluded]: Start isIncluded. First operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) Second operand 684 states. [2022-02-20 18:12:33,419 INFO L87 Difference]: Start difference. First operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) Second operand 684 states. [2022-02-20 18:12:33,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:33,444 INFO L93 Difference]: Finished difference Result 684 states and 835 transitions. [2022-02-20 18:12:33,444 INFO L276 IsEmpty]: Start isEmpty. Operand 684 states and 835 transitions. [2022-02-20 18:12:33,446 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:33,446 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:33,446 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:33,446 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:33,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) [2022-02-20 18:12:33,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 580 states to 580 states and 694 transitions. [2022-02-20 18:12:33,489 INFO L78 Accepts]: Start accepts. Automaton has 580 states and 694 transitions. Word has length 96 [2022-02-20 18:12:33,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:33,490 INFO L470 AbstractCegarLoop]: Abstraction has 580 states and 694 transitions. [2022-02-20 18:12:33,490 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2022-02-20 18:12:33,490 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 694 transitions. [2022-02-20 18:12:33,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-02-20 18:12:33,496 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:33,497 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:33,523 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:33,713 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:12:33,713 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:33,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:33,714 INFO L85 PathProgramCache]: Analyzing trace with hash -1223995222, now seen corresponding path program 1 times [2022-02-20 18:12:33,714 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:33,714 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1026227331] [2022-02-20 18:12:33,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:33,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:33,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:33,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,817 INFO L290 TraceCheckUtils]: 0: Hoare triple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15438#true} is VALID [2022-02-20 18:12:33,817 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,817 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15438#true} {15438#true} #251#return; {15438#true} is VALID [2022-02-20 18:12:33,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:33,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:33,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,836 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:33,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 0: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 2: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 4: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:33,847 INFO L290 TraceCheckUtils]: 6: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L290 TraceCheckUtils]: 7: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L290 TraceCheckUtils]: 8: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L290 TraceCheckUtils]: 9: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15438#true} {15438#true} #247#return; {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L290 TraceCheckUtils]: 0: Hoare triple {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L272 TraceCheckUtils]: 1: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:33,848 INFO L290 TraceCheckUtils]: 2: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L290 TraceCheckUtils]: 6: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L290 TraceCheckUtils]: 7: Hoare triple {15438#true} assume !(0 != ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L290 TraceCheckUtils]: 8: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:33,849 INFO L290 TraceCheckUtils]: 9: Hoare triple {15438#true} assume !(0 != ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,850 INFO L272 TraceCheckUtils]: 10: Hoare triple {15438#true} call processEnvironment__wrappee__highWaterSensor(); {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:33,850 INFO L290 TraceCheckUtils]: 11: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,850 INFO L290 TraceCheckUtils]: 12: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,850 INFO L290 TraceCheckUtils]: 13: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,850 INFO L290 TraceCheckUtils]: 14: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:33,850 INFO L290 TraceCheckUtils]: 15: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L290 TraceCheckUtils]: 16: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L290 TraceCheckUtils]: 17: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L290 TraceCheckUtils]: 18: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L290 TraceCheckUtils]: 19: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L290 TraceCheckUtils]: 20: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {15438#true} {15438#true} #247#return; {15438#true} is VALID [2022-02-20 18:12:33,851 INFO L290 TraceCheckUtils]: 22: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L290 TraceCheckUtils]: 23: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L290 TraceCheckUtils]: 24: Hoare triple {15438#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L290 TraceCheckUtils]: 25: Hoare triple {15438#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L290 TraceCheckUtils]: 26: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L290 TraceCheckUtils]: 27: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {15438#true} {15438#true} #255#return; {15438#true} is VALID [2022-02-20 18:12:33,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:12:33,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:33,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,861 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,861 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,861 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:12:33,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:33,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,870 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,870 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {15438#true} {15438#true} #261#return; {15438#true} is VALID [2022-02-20 18:12:33,870 INFO L290 TraceCheckUtils]: 0: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,870 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume !(0 == ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,870 INFO L272 TraceCheckUtils]: 2: Hoare triple {15438#true} call processEnvironment__wrappee__base(); {15438#true} is VALID [2022-02-20 18:12:33,870 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15438#true} {15438#true} #261#return; {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {15438#true} {15438#true} #245#return; {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L290 TraceCheckUtils]: 0: Hoare triple {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L272 TraceCheckUtils]: 1: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L290 TraceCheckUtils]: 2: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,871 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 6: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 7: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 8: Hoare triple {15438#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 9: Hoare triple {15438#true} assume { :end_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 10: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:33,872 INFO L290 TraceCheckUtils]: 11: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15438#true} is VALID [2022-02-20 18:12:33,873 INFO L290 TraceCheckUtils]: 12: Hoare triple {15438#true} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15438#true} is VALID [2022-02-20 18:12:33,873 INFO L290 TraceCheckUtils]: 13: Hoare triple {15438#true} assume 0 != isLowWaterLevel_~tmp~3#1;isLowWaterLevel_~tmp___0~1#1 := 0; {15438#true} is VALID [2022-02-20 18:12:33,873 INFO L290 TraceCheckUtils]: 14: Hoare triple {15438#true} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15438#true} is VALID [2022-02-20 18:12:33,873 INFO L290 TraceCheckUtils]: 15: Hoare triple {15438#true} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15438#true} is VALID [2022-02-20 18:12:33,873 INFO L290 TraceCheckUtils]: 16: Hoare triple {15438#true} assume !(0 != processEnvironment_~tmp~1#1); {15438#true} is VALID [2022-02-20 18:12:33,874 INFO L272 TraceCheckUtils]: 17: Hoare triple {15438#true} call processEnvironment__wrappee__highWaterSensor(); {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:33,874 INFO L290 TraceCheckUtils]: 18: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,874 INFO L290 TraceCheckUtils]: 19: Hoare triple {15438#true} assume !(0 == ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,874 INFO L272 TraceCheckUtils]: 20: Hoare triple {15438#true} call processEnvironment__wrappee__base(); {15438#true} is VALID [2022-02-20 18:12:33,874 INFO L290 TraceCheckUtils]: 21: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,874 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {15438#true} {15438#true} #261#return; {15438#true} is VALID [2022-02-20 18:12:33,874 INFO L290 TraceCheckUtils]: 23: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {15438#true} {15438#true} #245#return; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L290 TraceCheckUtils]: 25: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L290 TraceCheckUtils]: 26: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L290 TraceCheckUtils]: 27: Hoare triple {15438#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L290 TraceCheckUtils]: 28: Hoare triple {15438#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L290 TraceCheckUtils]: 29: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L290 TraceCheckUtils]: 30: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,875 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {15438#true} {15438#true} #255#return; {15438#true} is VALID [2022-02-20 18:12:33,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-02-20 18:12:33,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:33,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,951 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,951 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,951 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,951 INFO L290 TraceCheckUtils]: 0: Hoare triple {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,951 INFO L272 TraceCheckUtils]: 1: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:33,951 INFO L290 TraceCheckUtils]: 2: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,951 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L290 TraceCheckUtils]: 6: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L290 TraceCheckUtils]: 7: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L290 TraceCheckUtils]: 8: Hoare triple {15438#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L290 TraceCheckUtils]: 9: Hoare triple {15438#true} assume { :end_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,952 INFO L290 TraceCheckUtils]: 10: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 11: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 12: Hoare triple {15438#true} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 13: Hoare triple {15438#true} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 14: Hoare triple {15438#true} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 15: Hoare triple {15438#true} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 16: Hoare triple {15438#true} assume 0 != processEnvironment_~tmp~1#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {15438#true} is VALID [2022-02-20 18:12:33,953 INFO L290 TraceCheckUtils]: 17: Hoare triple {15438#true} assume { :end_inline_deactivatePump } true; {15438#true} is VALID [2022-02-20 18:12:33,954 INFO L290 TraceCheckUtils]: 18: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:33,954 INFO L290 TraceCheckUtils]: 19: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15584#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:33,955 INFO L290 TraceCheckUtils]: 20: Hoare triple {15584#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15585#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:33,955 INFO L290 TraceCheckUtils]: 21: Hoare triple {15585#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,955 INFO L290 TraceCheckUtils]: 22: Hoare triple {15529#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,956 INFO L290 TraceCheckUtils]: 23: Hoare triple {15529#(= 2 ~waterLevel~0)} assume true; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,956 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {15529#(= 2 ~waterLevel~0)} {15438#true} #255#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-02-20 18:12:33,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:33,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} assume true; {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:33,962 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} {15529#(= 2 ~waterLevel~0)} #251#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2022-02-20 18:12:33,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,964 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,964 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,965 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15438#true} {15529#(= 2 ~waterLevel~0)} #243#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2022-02-20 18:12:33,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 0: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 2: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 4: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:33,974 INFO L290 TraceCheckUtils]: 6: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:33,975 INFO L290 TraceCheckUtils]: 7: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:33,975 INFO L290 TraceCheckUtils]: 8: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:33,975 INFO L290 TraceCheckUtils]: 9: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,975 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15438#true} {15529#(= 2 ~waterLevel~0)} #247#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-02-20 18:12:33,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:33,978 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,978 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,978 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15438#true} {15439#false} #249#return; {15439#false} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {15438#true} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 1: Hoare triple {15438#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {15438#true} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 2: Hoare triple {15438#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15438#true} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 3: Hoare triple {15438#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {15438#true} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 4: Hoare triple {15438#true} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {15438#true} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 5: Hoare triple {15438#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {15438#true} is VALID [2022-02-20 18:12:33,979 INFO L290 TraceCheckUtils]: 6: Hoare triple {15438#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15438#true} is VALID [2022-02-20 18:12:33,980 INFO L290 TraceCheckUtils]: 7: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15438#true} is VALID [2022-02-20 18:12:33,980 INFO L290 TraceCheckUtils]: 8: Hoare triple {15438#true} assume !false; {15438#true} is VALID [2022-02-20 18:12:33,980 INFO L290 TraceCheckUtils]: 9: Hoare triple {15438#true} assume test_~splverifierCounter~0#1 < 4; {15438#true} is VALID [2022-02-20 18:12:33,980 INFO L290 TraceCheckUtils]: 10: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15438#true} is VALID [2022-02-20 18:12:33,980 INFO L290 TraceCheckUtils]: 11: Hoare triple {15438#true} assume 0 != test_~tmp~4#1; {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L272 TraceCheckUtils]: 12: Hoare triple {15438#true} call waterRise(); {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:33,981 INFO L290 TraceCheckUtils]: 13: Hoare triple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L290 TraceCheckUtils]: 14: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15438#true} {15438#true} #251#return; {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L290 TraceCheckUtils]: 16: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L290 TraceCheckUtils]: 17: Hoare triple {15438#true} assume !(0 != test_~tmp___0~2#1); {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L290 TraceCheckUtils]: 18: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15438#true} is VALID [2022-02-20 18:12:33,981 INFO L290 TraceCheckUtils]: 19: Hoare triple {15438#true} assume 0 != test_~tmp___2~0#1; {15438#true} is VALID [2022-02-20 18:12:33,982 INFO L272 TraceCheckUtils]: 20: Hoare triple {15438#true} call timeShift(); {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:33,982 INFO L290 TraceCheckUtils]: 21: Hoare triple {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,982 INFO L272 TraceCheckUtils]: 22: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:33,982 INFO L290 TraceCheckUtils]: 23: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L290 TraceCheckUtils]: 24: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L290 TraceCheckUtils]: 26: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L290 TraceCheckUtils]: 27: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L290 TraceCheckUtils]: 28: Hoare triple {15438#true} assume !(0 != ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L290 TraceCheckUtils]: 29: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:33,983 INFO L290 TraceCheckUtils]: 30: Hoare triple {15438#true} assume !(0 != ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,984 INFO L272 TraceCheckUtils]: 31: Hoare triple {15438#true} call processEnvironment__wrappee__highWaterSensor(); {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:33,984 INFO L290 TraceCheckUtils]: 32: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,984 INFO L290 TraceCheckUtils]: 33: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,984 INFO L290 TraceCheckUtils]: 34: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:33,984 INFO L290 TraceCheckUtils]: 35: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:33,984 INFO L290 TraceCheckUtils]: 36: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 37: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 38: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 39: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 40: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 41: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {15438#true} {15438#true} #247#return; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 43: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:33,985 INFO L290 TraceCheckUtils]: 44: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L290 TraceCheckUtils]: 45: Hoare triple {15438#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L290 TraceCheckUtils]: 46: Hoare triple {15438#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L290 TraceCheckUtils]: 47: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L290 TraceCheckUtils]: 48: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {15438#true} {15438#true} #255#return; {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L290 TraceCheckUtils]: 50: Hoare triple {15438#true} assume !false; {15438#true} is VALID [2022-02-20 18:12:33,986 INFO L290 TraceCheckUtils]: 51: Hoare triple {15438#true} assume test_~splverifierCounter~0#1 < 4; {15438#true} is VALID [2022-02-20 18:12:33,987 INFO L290 TraceCheckUtils]: 52: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15438#true} is VALID [2022-02-20 18:12:33,987 INFO L290 TraceCheckUtils]: 53: Hoare triple {15438#true} assume !(0 != test_~tmp~4#1); {15438#true} is VALID [2022-02-20 18:12:33,987 INFO L290 TraceCheckUtils]: 54: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15438#true} is VALID [2022-02-20 18:12:33,987 INFO L290 TraceCheckUtils]: 55: Hoare triple {15438#true} assume !(0 != test_~tmp___0~2#1); {15438#true} is VALID [2022-02-20 18:12:33,987 INFO L290 TraceCheckUtils]: 56: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15438#true} is VALID [2022-02-20 18:12:33,987 INFO L290 TraceCheckUtils]: 57: Hoare triple {15438#true} assume 0 != test_~tmp___2~0#1; {15438#true} is VALID [2022-02-20 18:12:33,988 INFO L272 TraceCheckUtils]: 58: Hoare triple {15438#true} call timeShift(); {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:33,988 INFO L290 TraceCheckUtils]: 59: Hoare triple {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,988 INFO L272 TraceCheckUtils]: 60: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:33,988 INFO L290 TraceCheckUtils]: 61: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,988 INFO L290 TraceCheckUtils]: 62: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,988 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,988 INFO L290 TraceCheckUtils]: 64: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 65: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 66: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 67: Hoare triple {15438#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 68: Hoare triple {15438#true} assume { :end_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 69: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 70: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15438#true} is VALID [2022-02-20 18:12:33,989 INFO L290 TraceCheckUtils]: 71: Hoare triple {15438#true} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15438#true} is VALID [2022-02-20 18:12:33,990 INFO L290 TraceCheckUtils]: 72: Hoare triple {15438#true} assume 0 != isLowWaterLevel_~tmp~3#1;isLowWaterLevel_~tmp___0~1#1 := 0; {15438#true} is VALID [2022-02-20 18:12:33,990 INFO L290 TraceCheckUtils]: 73: Hoare triple {15438#true} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15438#true} is VALID [2022-02-20 18:12:33,990 INFO L290 TraceCheckUtils]: 74: Hoare triple {15438#true} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15438#true} is VALID [2022-02-20 18:12:33,990 INFO L290 TraceCheckUtils]: 75: Hoare triple {15438#true} assume !(0 != processEnvironment_~tmp~1#1); {15438#true} is VALID [2022-02-20 18:12:33,990 INFO L272 TraceCheckUtils]: 76: Hoare triple {15438#true} call processEnvironment__wrappee__highWaterSensor(); {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:33,990 INFO L290 TraceCheckUtils]: 77: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L290 TraceCheckUtils]: 78: Hoare triple {15438#true} assume !(0 == ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L272 TraceCheckUtils]: 79: Hoare triple {15438#true} call processEnvironment__wrappee__base(); {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L290 TraceCheckUtils]: 80: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {15438#true} {15438#true} #261#return; {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L290 TraceCheckUtils]: 82: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {15438#true} {15438#true} #245#return; {15438#true} is VALID [2022-02-20 18:12:33,991 INFO L290 TraceCheckUtils]: 84: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 85: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 86: Hoare triple {15438#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 87: Hoare triple {15438#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 88: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 89: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {15438#true} {15438#true} #255#return; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 91: Hoare triple {15438#true} assume !false; {15438#true} is VALID [2022-02-20 18:12:33,992 INFO L290 TraceCheckUtils]: 92: Hoare triple {15438#true} assume test_~splverifierCounter~0#1 < 4; {15438#true} is VALID [2022-02-20 18:12:33,993 INFO L290 TraceCheckUtils]: 93: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15438#true} is VALID [2022-02-20 18:12:33,993 INFO L290 TraceCheckUtils]: 94: Hoare triple {15438#true} assume !(0 != test_~tmp~4#1); {15438#true} is VALID [2022-02-20 18:12:33,993 INFO L290 TraceCheckUtils]: 95: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15438#true} is VALID [2022-02-20 18:12:33,993 INFO L290 TraceCheckUtils]: 96: Hoare triple {15438#true} assume !(0 != test_~tmp___0~2#1); {15438#true} is VALID [2022-02-20 18:12:33,993 INFO L290 TraceCheckUtils]: 97: Hoare triple {15438#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15438#true} is VALID [2022-02-20 18:12:33,993 INFO L290 TraceCheckUtils]: 98: Hoare triple {15438#true} assume 0 != test_~tmp___2~0#1; {15438#true} is VALID [2022-02-20 18:12:33,994 INFO L272 TraceCheckUtils]: 99: Hoare triple {15438#true} call timeShift(); {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:33,994 INFO L290 TraceCheckUtils]: 100: Hoare triple {15553#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,994 INFO L272 TraceCheckUtils]: 101: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:33,994 INFO L290 TraceCheckUtils]: 102: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:33,994 INFO L290 TraceCheckUtils]: 103: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:33,994 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 105: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 106: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 107: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 108: Hoare triple {15438#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 109: Hoare triple {15438#true} assume { :end_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 110: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:33,995 INFO L290 TraceCheckUtils]: 111: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 112: Hoare triple {15438#true} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 113: Hoare triple {15438#true} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 114: Hoare triple {15438#true} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 115: Hoare triple {15438#true} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 116: Hoare triple {15438#true} assume 0 != processEnvironment_~tmp~1#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 117: Hoare triple {15438#true} assume { :end_inline_deactivatePump } true; {15438#true} is VALID [2022-02-20 18:12:33,996 INFO L290 TraceCheckUtils]: 118: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:33,997 INFO L290 TraceCheckUtils]: 119: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15584#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:33,997 INFO L290 TraceCheckUtils]: 120: Hoare triple {15584#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15585#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:33,998 INFO L290 TraceCheckUtils]: 121: Hoare triple {15585#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,998 INFO L290 TraceCheckUtils]: 122: Hoare triple {15529#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,998 INFO L290 TraceCheckUtils]: 123: Hoare triple {15529#(= 2 ~waterLevel~0)} assume true; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,999 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {15529#(= 2 ~waterLevel~0)} {15438#true} #255#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:33,999 INFO L290 TraceCheckUtils]: 125: Hoare triple {15529#(= 2 ~waterLevel~0)} assume !false; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,000 INFO L290 TraceCheckUtils]: 126: Hoare triple {15529#(= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,000 INFO L290 TraceCheckUtils]: 127: Hoare triple {15529#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,000 INFO L290 TraceCheckUtils]: 128: Hoare triple {15529#(= 2 ~waterLevel~0)} assume 0 != test_~tmp~4#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,001 INFO L272 TraceCheckUtils]: 129: Hoare triple {15529#(= 2 ~waterLevel~0)} call waterRise(); {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:34,001 INFO L290 TraceCheckUtils]: 130: Hoare triple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:34,001 INFO L290 TraceCheckUtils]: 131: Hoare triple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} assume true; {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:34,002 INFO L284 TraceCheckUtils]: 132: Hoare quadruple {15552#(= |old(~waterLevel~0)| ~waterLevel~0)} {15529#(= 2 ~waterLevel~0)} #251#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,002 INFO L290 TraceCheckUtils]: 133: Hoare triple {15529#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,002 INFO L290 TraceCheckUtils]: 134: Hoare triple {15529#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2#1); {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,003 INFO L290 TraceCheckUtils]: 135: Hoare triple {15529#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,003 INFO L290 TraceCheckUtils]: 136: Hoare triple {15529#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,003 INFO L272 TraceCheckUtils]: 137: Hoare triple {15529#(= 2 ~waterLevel~0)} call timeShift(); {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,004 INFO L290 TraceCheckUtils]: 138: Hoare triple {15529#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,004 INFO L272 TraceCheckUtils]: 139: Hoare triple {15529#(= 2 ~waterLevel~0)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:34,004 INFO L290 TraceCheckUtils]: 140: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:34,004 INFO L290 TraceCheckUtils]: 141: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,005 INFO L284 TraceCheckUtils]: 142: Hoare quadruple {15438#true} {15529#(= 2 ~waterLevel~0)} #243#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,005 INFO L290 TraceCheckUtils]: 143: Hoare triple {15529#(= 2 ~waterLevel~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,005 INFO L290 TraceCheckUtils]: 144: Hoare triple {15529#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,006 INFO L290 TraceCheckUtils]: 145: Hoare triple {15529#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,006 INFO L290 TraceCheckUtils]: 146: Hoare triple {15529#(= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,006 INFO L290 TraceCheckUtils]: 147: Hoare triple {15529#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,007 INFO L272 TraceCheckUtils]: 148: Hoare triple {15529#(= 2 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:34,007 INFO L290 TraceCheckUtils]: 149: Hoare triple {15568#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:34,007 INFO L290 TraceCheckUtils]: 150: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:34,007 INFO L290 TraceCheckUtils]: 151: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:34,007 INFO L290 TraceCheckUtils]: 152: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:34,007 INFO L290 TraceCheckUtils]: 153: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:34,007 INFO L290 TraceCheckUtils]: 154: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:34,008 INFO L290 TraceCheckUtils]: 155: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:34,008 INFO L290 TraceCheckUtils]: 156: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:34,008 INFO L290 TraceCheckUtils]: 157: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:34,008 INFO L290 TraceCheckUtils]: 158: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,008 INFO L284 TraceCheckUtils]: 159: Hoare quadruple {15438#true} {15529#(= 2 ~waterLevel~0)} #247#return; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,009 INFO L290 TraceCheckUtils]: 160: Hoare triple {15529#(= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {15529#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:34,009 INFO L290 TraceCheckUtils]: 161: Hoare triple {15529#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15547#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:34,010 INFO L290 TraceCheckUtils]: 162: Hoare triple {15547#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15548#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)} is VALID [2022-02-20 18:12:34,010 INFO L290 TraceCheckUtils]: 163: Hoare triple {15548#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {15439#false} is VALID [2022-02-20 18:12:34,010 INFO L272 TraceCheckUtils]: 164: Hoare triple {15439#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:34,010 INFO L290 TraceCheckUtils]: 165: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:34,010 INFO L290 TraceCheckUtils]: 166: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,010 INFO L284 TraceCheckUtils]: 167: Hoare quadruple {15438#true} {15439#false} #249#return; {15439#false} is VALID [2022-02-20 18:12:34,011 INFO L290 TraceCheckUtils]: 168: Hoare triple {15439#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {15439#false} is VALID [2022-02-20 18:12:34,011 INFO L290 TraceCheckUtils]: 169: Hoare triple {15439#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {15439#false} is VALID [2022-02-20 18:12:34,011 INFO L290 TraceCheckUtils]: 170: Hoare triple {15439#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15439#false} is VALID [2022-02-20 18:12:34,011 INFO L290 TraceCheckUtils]: 171: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:34,011 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2022-02-20 18:12:34,012 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:34,012 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1026227331] [2022-02-20 18:12:34,012 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1026227331] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:34,012 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1938295137] [2022-02-20 18:12:34,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:34,012 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:34,013 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:34,028 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:34,063 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:12:34,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:34,176 INFO L263 TraceCheckSpWp]: Trace formula consists of 673 conjuncts, 13 conjunts are in the unsatisfiable core [2022-02-20 18:12:34,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:34,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:34,875 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,876 INFO L290 TraceCheckUtils]: 1: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,876 INFO L290 TraceCheckUtils]: 2: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,876 INFO L290 TraceCheckUtils]: 3: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,877 INFO L290 TraceCheckUtils]: 4: Hoare triple {15589#(<= ~waterLevel~0 1)} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,877 INFO L290 TraceCheckUtils]: 5: Hoare triple {15589#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,877 INFO L290 TraceCheckUtils]: 6: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,878 INFO L290 TraceCheckUtils]: 7: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,878 INFO L290 TraceCheckUtils]: 8: Hoare triple {15589#(<= ~waterLevel~0 1)} assume !false; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,878 INFO L290 TraceCheckUtils]: 9: Hoare triple {15589#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,879 INFO L290 TraceCheckUtils]: 10: Hoare triple {15589#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,879 INFO L290 TraceCheckUtils]: 11: Hoare triple {15589#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:34,879 INFO L272 TraceCheckUtils]: 12: Hoare triple {15589#(<= ~waterLevel~0 1)} call waterRise(); {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,880 INFO L290 TraceCheckUtils]: 13: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15630#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:34,880 INFO L290 TraceCheckUtils]: 14: Hoare triple {15630#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} assume true; {15630#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:34,881 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15630#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} {15589#(<= ~waterLevel~0 1)} #251#return; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,881 INFO L290 TraceCheckUtils]: 16: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,882 INFO L290 TraceCheckUtils]: 17: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,882 INFO L290 TraceCheckUtils]: 18: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,882 INFO L290 TraceCheckUtils]: 19: Hoare triple {15637#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,883 INFO L272 TraceCheckUtils]: 20: Hoare triple {15637#(<= ~waterLevel~0 2)} call timeShift(); {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,883 INFO L290 TraceCheckUtils]: 21: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,883 INFO L272 TraceCheckUtils]: 22: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:34,883 INFO L290 TraceCheckUtils]: 23: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:34,883 INFO L290 TraceCheckUtils]: 24: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,884 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {15438#true} {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #243#return; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,884 INFO L290 TraceCheckUtils]: 26: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,884 INFO L290 TraceCheckUtils]: 27: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,885 INFO L290 TraceCheckUtils]: 28: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,885 INFO L290 TraceCheckUtils]: 29: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,885 INFO L290 TraceCheckUtils]: 30: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,885 INFO L272 TraceCheckUtils]: 31: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 32: Hoare triple {15438#true} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 33: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 34: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 35: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 36: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 37: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 38: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 39: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 40: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:34,886 INFO L290 TraceCheckUtils]: 41: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,887 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {15438#true} {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #247#return; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,887 INFO L290 TraceCheckUtils]: 43: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,887 INFO L290 TraceCheckUtils]: 44: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,888 INFO L290 TraceCheckUtils]: 45: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,888 INFO L290 TraceCheckUtils]: 46: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,888 INFO L290 TraceCheckUtils]: 47: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,889 INFO L290 TraceCheckUtils]: 48: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume true; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,889 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} {15637#(<= ~waterLevel~0 2)} #255#return; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,890 INFO L290 TraceCheckUtils]: 50: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !false; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,890 INFO L290 TraceCheckUtils]: 51: Hoare triple {15637#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,890 INFO L290 TraceCheckUtils]: 52: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,891 INFO L290 TraceCheckUtils]: 53: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~4#1); {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,891 INFO L290 TraceCheckUtils]: 54: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,891 INFO L290 TraceCheckUtils]: 55: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,892 INFO L290 TraceCheckUtils]: 56: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,892 INFO L290 TraceCheckUtils]: 57: Hoare triple {15637#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:34,892 INFO L272 TraceCheckUtils]: 58: Hoare triple {15637#(<= ~waterLevel~0 2)} call timeShift(); {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,893 INFO L290 TraceCheckUtils]: 59: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,893 INFO L272 TraceCheckUtils]: 60: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:34,893 INFO L290 TraceCheckUtils]: 61: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:34,893 INFO L290 TraceCheckUtils]: 62: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,894 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {15438#true} {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #243#return; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,894 INFO L290 TraceCheckUtils]: 64: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,894 INFO L290 TraceCheckUtils]: 65: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,895 INFO L290 TraceCheckUtils]: 66: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,895 INFO L290 TraceCheckUtils]: 67: Hoare triple {15626#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,896 INFO L290 TraceCheckUtils]: 68: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_lowerWaterLevel } true; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,896 INFO L290 TraceCheckUtils]: 69: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,896 INFO L290 TraceCheckUtils]: 70: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,897 INFO L290 TraceCheckUtils]: 71: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,897 INFO L290 TraceCheckUtils]: 72: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != isLowWaterLevel_~tmp~3#1;isLowWaterLevel_~tmp___0~1#1 := 0; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,897 INFO L290 TraceCheckUtils]: 73: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,898 INFO L290 TraceCheckUtils]: 74: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,898 INFO L290 TraceCheckUtils]: 75: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume !(0 != processEnvironment_~tmp~1#1); {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,898 INFO L272 TraceCheckUtils]: 76: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {15438#true} is VALID [2022-02-20 18:12:34,898 INFO L290 TraceCheckUtils]: 77: Hoare triple {15438#true} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:34,898 INFO L290 TraceCheckUtils]: 78: Hoare triple {15438#true} assume !(0 == ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:34,899 INFO L272 TraceCheckUtils]: 79: Hoare triple {15438#true} call processEnvironment__wrappee__base(); {15438#true} is VALID [2022-02-20 18:12:34,899 INFO L290 TraceCheckUtils]: 80: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,899 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {15438#true} {15438#true} #261#return; {15438#true} is VALID [2022-02-20 18:12:34,899 INFO L290 TraceCheckUtils]: 82: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:34,899 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {15438#true} {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} #245#return; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,900 INFO L290 TraceCheckUtils]: 84: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:34,901 INFO L290 TraceCheckUtils]: 85: Hoare triple {15794#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15849#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:34,901 INFO L290 TraceCheckUtils]: 86: Hoare triple {15849#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15853#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))} is VALID [2022-02-20 18:12:34,902 INFO L290 TraceCheckUtils]: 87: Hoare triple {15853#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15857#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:34,902 INFO L290 TraceCheckUtils]: 88: Hoare triple {15857#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15857#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:34,902 INFO L290 TraceCheckUtils]: 89: Hoare triple {15857#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume true; {15857#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:34,903 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {15857#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} {15637#(<= ~waterLevel~0 2)} #255#return; {15439#false} is VALID [2022-02-20 18:12:34,903 INFO L290 TraceCheckUtils]: 91: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:34,903 INFO L290 TraceCheckUtils]: 92: Hoare triple {15439#false} assume test_~splverifierCounter~0#1 < 4; {15439#false} is VALID [2022-02-20 18:12:34,903 INFO L290 TraceCheckUtils]: 93: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L290 TraceCheckUtils]: 94: Hoare triple {15439#false} assume !(0 != test_~tmp~4#1); {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L290 TraceCheckUtils]: 95: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L290 TraceCheckUtils]: 96: Hoare triple {15439#false} assume !(0 != test_~tmp___0~2#1); {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L290 TraceCheckUtils]: 97: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L290 TraceCheckUtils]: 98: Hoare triple {15439#false} assume 0 != test_~tmp___2~0#1; {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L272 TraceCheckUtils]: 99: Hoare triple {15439#false} call timeShift(); {15439#false} is VALID [2022-02-20 18:12:34,904 INFO L290 TraceCheckUtils]: 100: Hoare triple {15439#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L272 TraceCheckUtils]: 101: Hoare triple {15439#false} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L290 TraceCheckUtils]: 102: Hoare triple {15439#false} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L290 TraceCheckUtils]: 103: Hoare triple {15439#false} assume true; {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {15439#false} {15439#false} #243#return; {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L290 TraceCheckUtils]: 105: Hoare triple {15439#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L290 TraceCheckUtils]: 106: Hoare triple {15439#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15439#false} is VALID [2022-02-20 18:12:34,905 INFO L290 TraceCheckUtils]: 107: Hoare triple {15439#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 108: Hoare triple {15439#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 109: Hoare triple {15439#false} assume { :end_inline_lowerWaterLevel } true; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 110: Hoare triple {15439#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 111: Hoare triple {15439#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 112: Hoare triple {15439#false} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 113: Hoare triple {15439#false} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 114: Hoare triple {15439#false} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15439#false} is VALID [2022-02-20 18:12:34,906 INFO L290 TraceCheckUtils]: 115: Hoare triple {15439#false} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 116: Hoare triple {15439#false} assume 0 != processEnvironment_~tmp~1#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 117: Hoare triple {15439#false} assume { :end_inline_deactivatePump } true; {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 118: Hoare triple {15439#false} assume { :end_inline_processEnvironment } true; {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 119: Hoare triple {15439#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 120: Hoare triple {15439#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 121: Hoare triple {15439#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15439#false} is VALID [2022-02-20 18:12:34,907 INFO L290 TraceCheckUtils]: 122: Hoare triple {15439#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L290 TraceCheckUtils]: 123: Hoare triple {15439#false} assume true; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {15439#false} {15439#false} #255#return; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L290 TraceCheckUtils]: 125: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L290 TraceCheckUtils]: 126: Hoare triple {15439#false} assume test_~splverifierCounter~0#1 < 4; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L290 TraceCheckUtils]: 127: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L290 TraceCheckUtils]: 128: Hoare triple {15439#false} assume 0 != test_~tmp~4#1; {15439#false} is VALID [2022-02-20 18:12:34,908 INFO L272 TraceCheckUtils]: 129: Hoare triple {15439#false} call waterRise(); {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L290 TraceCheckUtils]: 130: Hoare triple {15439#false} assume !(~waterLevel~0 < 2); {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L290 TraceCheckUtils]: 131: Hoare triple {15439#false} assume true; {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L284 TraceCheckUtils]: 132: Hoare quadruple {15439#false} {15439#false} #251#return; {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L290 TraceCheckUtils]: 133: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L290 TraceCheckUtils]: 134: Hoare triple {15439#false} assume !(0 != test_~tmp___0~2#1); {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L290 TraceCheckUtils]: 135: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L290 TraceCheckUtils]: 136: Hoare triple {15439#false} assume 0 != test_~tmp___2~0#1; {15439#false} is VALID [2022-02-20 18:12:34,909 INFO L272 TraceCheckUtils]: 137: Hoare triple {15439#false} call timeShift(); {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L290 TraceCheckUtils]: 138: Hoare triple {15439#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L272 TraceCheckUtils]: 139: Hoare triple {15439#false} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L290 TraceCheckUtils]: 140: Hoare triple {15439#false} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L290 TraceCheckUtils]: 141: Hoare triple {15439#false} assume true; {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L284 TraceCheckUtils]: 142: Hoare quadruple {15439#false} {15439#false} #243#return; {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L290 TraceCheckUtils]: 143: Hoare triple {15439#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15439#false} is VALID [2022-02-20 18:12:34,910 INFO L290 TraceCheckUtils]: 144: Hoare triple {15439#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 145: Hoare triple {15439#false} assume !(0 != ~pumpRunning~0); {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 146: Hoare triple {15439#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 147: Hoare triple {15439#false} assume !(0 != ~pumpRunning~0); {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L272 TraceCheckUtils]: 148: Hoare triple {15439#false} call processEnvironment__wrappee__highWaterSensor(); {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 149: Hoare triple {15439#false} havoc ~tmp~0#1; {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 150: Hoare triple {15439#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 151: Hoare triple {15439#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15439#false} is VALID [2022-02-20 18:12:34,911 INFO L290 TraceCheckUtils]: 152: Hoare triple {15439#false} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 153: Hoare triple {15439#false} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 154: Hoare triple {15439#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 155: Hoare triple {15439#false} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 156: Hoare triple {15439#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 157: Hoare triple {15439#false} assume { :end_inline_activatePump } true; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 158: Hoare triple {15439#false} assume true; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L284 TraceCheckUtils]: 159: Hoare quadruple {15439#false} {15439#false} #247#return; {15439#false} is VALID [2022-02-20 18:12:34,912 INFO L290 TraceCheckUtils]: 160: Hoare triple {15439#false} assume { :end_inline_processEnvironment } true; {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L290 TraceCheckUtils]: 161: Hoare triple {15439#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L290 TraceCheckUtils]: 162: Hoare triple {15439#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L290 TraceCheckUtils]: 163: Hoare triple {15439#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L272 TraceCheckUtils]: 164: Hoare triple {15439#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L290 TraceCheckUtils]: 165: Hoare triple {15439#false} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L290 TraceCheckUtils]: 166: Hoare triple {15439#false} assume true; {15439#false} is VALID [2022-02-20 18:12:34,913 INFO L284 TraceCheckUtils]: 167: Hoare quadruple {15439#false} {15439#false} #249#return; {15439#false} is VALID [2022-02-20 18:12:34,914 INFO L290 TraceCheckUtils]: 168: Hoare triple {15439#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {15439#false} is VALID [2022-02-20 18:12:34,914 INFO L290 TraceCheckUtils]: 169: Hoare triple {15439#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {15439#false} is VALID [2022-02-20 18:12:34,914 INFO L290 TraceCheckUtils]: 170: Hoare triple {15439#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15439#false} is VALID [2022-02-20 18:12:34,914 INFO L290 TraceCheckUtils]: 171: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:34,914 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 140 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-02-20 18:12:34,915 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:36,293 INFO L290 TraceCheckUtils]: 171: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:36,293 INFO L290 TraceCheckUtils]: 170: Hoare triple {15439#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15439#false} is VALID [2022-02-20 18:12:36,293 INFO L290 TraceCheckUtils]: 169: Hoare triple {15439#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {15439#false} is VALID [2022-02-20 18:12:36,293 INFO L290 TraceCheckUtils]: 168: Hoare triple {15439#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret53#1 && __utac_acc__Specification5_spec__3_#t~ret53#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret53#1;havoc __utac_acc__Specification5_spec__3_#t~ret53#1; {15439#false} is VALID [2022-02-20 18:12:36,293 INFO L284 TraceCheckUtils]: 167: Hoare quadruple {15438#true} {15439#false} #249#return; {15439#false} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 166: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 165: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L272 TraceCheckUtils]: 164: Hoare triple {15439#false} call __utac_acc__Specification5_spec__3_#t~ret53#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 163: Hoare triple {15439#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9#1; {15439#false} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 162: Hoare triple {15439#false} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15439#false} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 161: Hoare triple {15439#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15439#false} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 160: Hoare triple {15439#false} assume { :end_inline_processEnvironment } true; {15439#false} is VALID [2022-02-20 18:12:36,294 INFO L284 TraceCheckUtils]: 159: Hoare quadruple {15438#true} {15439#false} #247#return; {15439#false} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 158: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 157: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 156: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 155: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:36,294 INFO L290 TraceCheckUtils]: 154: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 153: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 152: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 151: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 150: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 149: Hoare triple {15438#true} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L272 TraceCheckUtils]: 148: Hoare triple {15439#false} call processEnvironment__wrappee__highWaterSensor(); {15438#true} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 147: Hoare triple {15439#false} assume !(0 != ~pumpRunning~0); {15439#false} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 146: Hoare triple {15439#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15439#false} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 145: Hoare triple {15439#false} assume !(0 != ~pumpRunning~0); {15439#false} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 144: Hoare triple {15439#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15439#false} is VALID [2022-02-20 18:12:36,295 INFO L290 TraceCheckUtils]: 143: Hoare triple {15439#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15439#false} is VALID [2022-02-20 18:12:36,295 INFO L284 TraceCheckUtils]: 142: Hoare quadruple {15438#true} {15439#false} #243#return; {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 141: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 140: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:36,296 INFO L272 TraceCheckUtils]: 139: Hoare triple {15439#false} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 138: Hoare triple {15439#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L272 TraceCheckUtils]: 137: Hoare triple {15439#false} call timeShift(); {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 136: Hoare triple {15439#false} assume 0 != test_~tmp___2~0#1; {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 135: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 134: Hoare triple {15439#false} assume !(0 != test_~tmp___0~2#1); {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 133: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L284 TraceCheckUtils]: 132: Hoare quadruple {15438#true} {15439#false} #251#return; {15439#false} is VALID [2022-02-20 18:12:36,296 INFO L290 TraceCheckUtils]: 131: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 130: Hoare triple {15438#true} assume !(~waterLevel~0 < 2); {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L272 TraceCheckUtils]: 129: Hoare triple {15439#false} call waterRise(); {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 128: Hoare triple {15439#false} assume 0 != test_~tmp~4#1; {15439#false} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 127: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15439#false} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 126: Hoare triple {15439#false} assume test_~splverifierCounter~0#1 < 4; {15439#false} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 125: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:36,297 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {15438#true} {15439#false} #255#return; {15439#false} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 123: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 122: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 121: Hoare triple {15438#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 120: Hoare triple {15438#true} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 119: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {15438#true} is VALID [2022-02-20 18:12:36,297 INFO L290 TraceCheckUtils]: 118: Hoare triple {15438#true} assume { :end_inline_processEnvironment } true; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 117: Hoare triple {15438#true} assume { :end_inline_deactivatePump } true; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 116: Hoare triple {15438#true} assume 0 != processEnvironment_~tmp~1#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 115: Hoare triple {15438#true} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 114: Hoare triple {15438#true} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 113: Hoare triple {15438#true} assume !(0 != isLowWaterLevel_~tmp~3#1);isLowWaterLevel_~tmp___0~1#1 := 1; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 112: Hoare triple {15438#true} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {15438#true} is VALID [2022-02-20 18:12:36,298 INFO L290 TraceCheckUtils]: 111: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L290 TraceCheckUtils]: 110: Hoare triple {15438#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L290 TraceCheckUtils]: 109: Hoare triple {15438#true} assume { :end_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L290 TraceCheckUtils]: 108: Hoare triple {15438#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L290 TraceCheckUtils]: 107: Hoare triple {15438#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L290 TraceCheckUtils]: 106: Hoare triple {15438#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L290 TraceCheckUtils]: 105: Hoare triple {15438#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:36,299 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {15438#true} {15438#true} #243#return; {15438#true} is VALID [2022-02-20 18:12:36,300 INFO L290 TraceCheckUtils]: 103: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,300 INFO L290 TraceCheckUtils]: 102: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:36,300 INFO L272 TraceCheckUtils]: 101: Hoare triple {15438#true} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:36,300 INFO L290 TraceCheckUtils]: 100: Hoare triple {15438#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {15438#true} is VALID [2022-02-20 18:12:36,300 INFO L272 TraceCheckUtils]: 99: Hoare triple {15439#false} call timeShift(); {15438#true} is VALID [2022-02-20 18:12:36,300 INFO L290 TraceCheckUtils]: 98: Hoare triple {15439#false} assume 0 != test_~tmp___2~0#1; {15439#false} is VALID [2022-02-20 18:12:36,300 INFO L290 TraceCheckUtils]: 97: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15439#false} is VALID [2022-02-20 18:12:36,300 INFO L290 TraceCheckUtils]: 96: Hoare triple {15439#false} assume !(0 != test_~tmp___0~2#1); {15439#false} is VALID [2022-02-20 18:12:36,301 INFO L290 TraceCheckUtils]: 95: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15439#false} is VALID [2022-02-20 18:12:36,301 INFO L290 TraceCheckUtils]: 94: Hoare triple {15439#false} assume !(0 != test_~tmp~4#1); {15439#false} is VALID [2022-02-20 18:12:36,301 INFO L290 TraceCheckUtils]: 93: Hoare triple {15439#false} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15439#false} is VALID [2022-02-20 18:12:36,301 INFO L290 TraceCheckUtils]: 92: Hoare triple {15439#false} assume test_~splverifierCounter~0#1 < 4; {15439#false} is VALID [2022-02-20 18:12:36,301 INFO L290 TraceCheckUtils]: 91: Hoare triple {15439#false} assume !false; {15439#false} is VALID [2022-02-20 18:12:36,302 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {16356#(< 2 |old(~waterLevel~0)|)} {15637#(<= ~waterLevel~0 2)} #255#return; {15439#false} is VALID [2022-02-20 18:12:36,302 INFO L290 TraceCheckUtils]: 89: Hoare triple {16356#(< 2 |old(~waterLevel~0)|)} assume true; {16356#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:36,302 INFO L290 TraceCheckUtils]: 88: Hoare triple {16356#(< 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {16356#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:36,303 INFO L290 TraceCheckUtils]: 87: Hoare triple {16366#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|)) (< 2 |old(~waterLevel~0)|))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {16356#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:36,303 INFO L290 TraceCheckUtils]: 86: Hoare triple {16370#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {16366#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|)) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,304 INFO L290 TraceCheckUtils]: 85: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {16370#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,306 INFO L290 TraceCheckUtils]: 84: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_processEnvironment } true; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,307 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {15438#true} {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} #245#return; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,307 INFO L290 TraceCheckUtils]: 82: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,307 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {15438#true} {15438#true} #261#return; {15438#true} is VALID [2022-02-20 18:12:36,307 INFO L290 TraceCheckUtils]: 80: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,307 INFO L272 TraceCheckUtils]: 79: Hoare triple {15438#true} call processEnvironment__wrappee__base(); {15438#true} is VALID [2022-02-20 18:12:36,308 INFO L290 TraceCheckUtils]: 78: Hoare triple {15438#true} assume !(0 == ~pumpRunning~0); {15438#true} is VALID [2022-02-20 18:12:36,308 INFO L290 TraceCheckUtils]: 77: Hoare triple {15438#true} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:36,308 INFO L272 TraceCheckUtils]: 76: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} call processEnvironment__wrappee__highWaterSensor(); {15438#true} is VALID [2022-02-20 18:12:36,308 INFO L290 TraceCheckUtils]: 75: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume !(0 != processEnvironment_~tmp~1#1); {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,309 INFO L290 TraceCheckUtils]: 74: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} processEnvironment_#t~ret5#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,309 INFO L290 TraceCheckUtils]: 73: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,309 INFO L290 TraceCheckUtils]: 72: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != isLowWaterLevel_~tmp~3#1;isLowWaterLevel_~tmp___0~1#1 := 0; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,310 INFO L290 TraceCheckUtils]: 71: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} isLowWaterLevel_#t~ret16#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret16#1 && isLowWaterLevel_#t~ret16#1 <= 2147483647;isLowWaterLevel_~tmp~3#1 := isLowWaterLevel_#t~ret16#1;havoc isLowWaterLevel_#t~ret16#1; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,310 INFO L290 TraceCheckUtils]: 70: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret16#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~3#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~3#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,310 INFO L290 TraceCheckUtils]: 69: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,311 INFO L290 TraceCheckUtils]: 68: Hoare triple {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_lowerWaterLevel } true; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,311 INFO L290 TraceCheckUtils]: 67: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16374#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:36,312 INFO L290 TraceCheckUtils]: 66: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,312 INFO L290 TraceCheckUtils]: 65: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,313 INFO L290 TraceCheckUtils]: 64: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,313 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {15438#true} {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #243#return; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,313 INFO L290 TraceCheckUtils]: 62: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,314 INFO L290 TraceCheckUtils]: 61: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:36,314 INFO L272 TraceCheckUtils]: 60: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:36,314 INFO L290 TraceCheckUtils]: 59: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,315 INFO L272 TraceCheckUtils]: 58: Hoare triple {15637#(<= ~waterLevel~0 2)} call timeShift(); {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,315 INFO L290 TraceCheckUtils]: 57: Hoare triple {15637#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,315 INFO L290 TraceCheckUtils]: 56: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,316 INFO L290 TraceCheckUtils]: 55: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,316 INFO L290 TraceCheckUtils]: 54: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,316 INFO L290 TraceCheckUtils]: 53: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~4#1); {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,317 INFO L290 TraceCheckUtils]: 52: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,317 INFO L290 TraceCheckUtils]: 51: Hoare triple {15637#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,317 INFO L290 TraceCheckUtils]: 50: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !false; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,318 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} {15637#(<= ~waterLevel~0 2)} #255#return; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,318 INFO L290 TraceCheckUtils]: 48: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume true; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,319 INFO L290 TraceCheckUtils]: 47: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,319 INFO L290 TraceCheckUtils]: 46: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9#1); {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,320 INFO L290 TraceCheckUtils]: 45: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} __utac_acc__Specification5_spec__3_#t~ret52#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret52#1 && __utac_acc__Specification5_spec__3_#t~ret52#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9#1 := __utac_acc__Specification5_spec__3_#t~ret52#1;havoc __utac_acc__Specification5_spec__3_#t~ret52#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,320 INFO L290 TraceCheckUtils]: 44: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret52#1, __utac_acc__Specification5_spec__3_#t~ret53#1, __utac_acc__Specification5_spec__3_~tmp~9#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~9#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,321 INFO L290 TraceCheckUtils]: 43: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline_processEnvironment } true; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,321 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {15438#true} {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #247#return; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,321 INFO L290 TraceCheckUtils]: 41: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,321 INFO L290 TraceCheckUtils]: 40: Hoare triple {15438#true} assume { :end_inline_activatePump } true; {15438#true} is VALID [2022-02-20 18:12:36,321 INFO L290 TraceCheckUtils]: 39: Hoare triple {15438#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 38: Hoare triple {15438#true} #t~ret4#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret4#1 && #t~ret4#1 <= 2147483647;~tmp~0#1 := #t~ret4#1;havoc #t~ret4#1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 37: Hoare triple {15438#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 36: Hoare triple {15438#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 35: Hoare triple {15438#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 34: Hoare triple {15438#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 33: Hoare triple {15438#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L290 TraceCheckUtils]: 32: Hoare triple {15438#true} havoc ~tmp~0#1; {15438#true} is VALID [2022-02-20 18:12:36,322 INFO L272 TraceCheckUtils]: 31: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call processEnvironment__wrappee__highWaterSensor(); {15438#true} is VALID [2022-02-20 18:12:36,323 INFO L290 TraceCheckUtils]: 30: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,324 INFO L290 TraceCheckUtils]: 29: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,324 INFO L290 TraceCheckUtils]: 28: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,325 INFO L290 TraceCheckUtils]: 27: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,325 INFO L290 TraceCheckUtils]: 26: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret51#1 && __utac_acc__Specification5_spec__2_#t~ret51#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret51#1;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,326 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {15438#true} {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #243#return; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,326 INFO L290 TraceCheckUtils]: 24: Hoare triple {15438#true} assume true; {15438#true} is VALID [2022-02-20 18:12:36,326 INFO L290 TraceCheckUtils]: 23: Hoare triple {15438#true} havoc ~retValue_acc~1;~retValue_acc~1 := ~pumpRunning~0;#res := ~retValue_acc~1; {15438#true} is VALID [2022-02-20 18:12:36,326 INFO L272 TraceCheckUtils]: 22: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret51#1 := isPumpRunning(); {15438#true} is VALID [2022-02-20 18:12:36,326 INFO L290 TraceCheckUtils]: 21: Hoare triple {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret51#1; {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,327 INFO L272 TraceCheckUtils]: 20: Hoare triple {15637#(<= ~waterLevel~0 2)} call timeShift(); {16429#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:36,327 INFO L290 TraceCheckUtils]: 19: Hoare triple {15637#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,328 INFO L290 TraceCheckUtils]: 18: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,328 INFO L290 TraceCheckUtils]: 17: Hoare triple {15637#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,329 INFO L290 TraceCheckUtils]: 16: Hoare triple {15637#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,329 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16586#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} {15589#(<= ~waterLevel~0 1)} #251#return; {15637#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:36,330 INFO L290 TraceCheckUtils]: 14: Hoare triple {16586#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} assume true; {16586#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:36,330 INFO L290 TraceCheckUtils]: 13: Hoare triple {16593#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16586#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:36,331 INFO L272 TraceCheckUtils]: 12: Hoare triple {15589#(<= ~waterLevel~0 1)} call waterRise(); {16593#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:36,331 INFO L290 TraceCheckUtils]: 11: Hoare triple {15589#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,332 INFO L290 TraceCheckUtils]: 10: Hoare triple {15589#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet17#1 && test_#t~nondet17#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet17#1;havoc test_#t~nondet17#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,332 INFO L290 TraceCheckUtils]: 9: Hoare triple {15589#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,333 INFO L290 TraceCheckUtils]: 8: Hoare triple {15589#(<= ~waterLevel~0 1)} assume !false; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,333 INFO L290 TraceCheckUtils]: 7: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet17#1, test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,333 INFO L290 TraceCheckUtils]: 6: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,334 INFO L290 TraceCheckUtils]: 5: Hoare triple {15589#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,334 INFO L290 TraceCheckUtils]: 4: Hoare triple {15589#(<= ~waterLevel~0 1)} main_#t~ret26#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret26#1 && main_#t~ret26#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret26#1;havoc main_#t~ret26#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,335 INFO L290 TraceCheckUtils]: 3: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~10#1;havoc valid_product_~retValue_acc~10#1;valid_product_~retValue_acc~10#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~10#1; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,335 INFO L290 TraceCheckUtils]: 2: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,335 INFO L290 TraceCheckUtils]: 1: Hoare triple {15589#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret26#1, main_~retValue_acc~8#1, main_~tmp~5#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,337 INFO L290 TraceCheckUtils]: 0: Hoare triple {15438#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0; {15589#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:36,338 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 78 proven. 44 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2022-02-20 18:12:36,338 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1938295137] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:36,338 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:36,338 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 25 [2022-02-20 18:12:36,339 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1543752910] [2022-02-20 18:12:36,339 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:36,340 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) Word has length 172 [2022-02-20 18:12:36,348 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:36,348 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-02-20 18:12:36,552 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 277 edges. 277 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:36,552 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-02-20 18:12:36,552 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:36,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-02-20 18:12:36,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=481, Unknown=0, NotChecked=0, Total=600 [2022-02-20 18:12:36,553 INFO L87 Difference]: Start difference. First operand 580 states and 694 transitions. Second operand has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-02-20 18:12:40,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:40,095 INFO L93 Difference]: Finished difference Result 1229 states and 1520 transitions. [2022-02-20 18:12:40,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-02-20 18:12:40,096 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) Word has length 172 [2022-02-20 18:12:40,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:40,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-02-20 18:12:40,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 344 transitions. [2022-02-20 18:12:40,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-02-20 18:12:40,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 344 transitions. [2022-02-20 18:12:40,106 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 28 states and 344 transitions. [2022-02-20 18:12:40,432 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 344 edges. 344 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:40,433 INFO L225 Difference]: With dead ends: 1229 [2022-02-20 18:12:40,433 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:12:40,436 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 411 GetRequests, 362 SyntacticMatches, 3 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 428 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=487, Invalid=1769, Unknown=0, NotChecked=0, Total=2256 [2022-02-20 18:12:40,436 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 888 mSDsluCounter, 656 mSDsCounter, 0 mSdLazyCounter, 862 mSolverCounterSat, 321 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 891 SdHoareTripleChecker+Valid, 790 SdHoareTripleChecker+Invalid, 1183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 321 IncrementalHoareTripleChecker+Valid, 862 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:40,436 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [891 Valid, 790 Invalid, 1183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [321 Valid, 862 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-02-20 18:12:40,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:12:40,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:12:40,437 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:40,437 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:40,437 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:40,437 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:40,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:40,438 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:40,438 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:40,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:40,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:40,438 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:40,438 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:40,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:40,438 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:40,438 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:40,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:40,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:40,439 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:40,439 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:40,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:40,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:12:40,439 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 172 [2022-02-20 18:12:40,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:40,439 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:12:40,440 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-02-20 18:12:40,440 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:40,440 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:40,442 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:12:40,478 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-02-20 18:12:40,655 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:12:40,657 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 92 98) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 92 98) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 357 368) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L361-1(lines 357 368) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 357 368) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L450-1(line 450) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 444 473) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 444 473) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point L469(lines 444 473) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L465(line 465) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L458(lines 458 462) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point L458-1(lines 458 462) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L455(line 455) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point L454-2(lines 454 468) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L861 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: true [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 341) no Hoare annotation was computed. [2022-02-20 18:12:46,629 INFO L858 garLoopResultBuilder]: For program point L977(lines 977 983) no Hoare annotation was computed. [2022-02-20 18:12:46,630 INFO L854 garLoopResultBuilder]: At program point L337-2(lines 333 344) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2022-02-20 18:12:46,630 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 91) no Hoare annotation was computed. [2022-02-20 18:12:46,630 INFO L854 garLoopResultBuilder]: At program point L164(lines 159 166) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse9 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (and .cse8 .cse1 .cse2 (<= ~waterLevel~0 1) .cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse9)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1) .cse3) .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse4 .cse7) (or (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse6 .cse0 .cse4 .cse5 .cse7) (or .cse8 .cse0 .cse5)))) [2022-02-20 18:12:46,632 INFO L854 garLoopResultBuilder]: At program point L961(lines 954 963) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 (not (= |old(~waterLevel~0)| 2))) (or .cse3 .cse1 .cse4 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:12:46,632 INFO L858 garLoopResultBuilder]: For program point L251(lines 251 255) no Hoare annotation was computed. [2022-02-20 18:12:46,632 INFO L858 garLoopResultBuilder]: For program point L251-2(lines 251 255) no Hoare annotation was computed. [2022-02-20 18:12:46,632 INFO L854 garLoopResultBuilder]: At program point L974(line 974) the Hoare annotation is: (let ((.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse11 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse17 (<= ~waterLevel~0 1)) (.cse15 (= 1 ~systemActive~0)) (.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (and .cse16 .cse6 .cse7 .cse11 .cse17 .cse15 .cse18 .cse13 .cse19)) (.cse8 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse14 .cse16 .cse17 .cse15 .cse18 .cse13 .cse19)) (.cse1 (not .cse15)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse4) (or .cse5 .cse6 .cse1 (and .cse7 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) .cse8 .cse9)) (or .cse6 .cse1 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse12 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|)))) (or .cse5 .cse0 .cse1 .cse2 (and .cse7 .cse11 .cse8 .cse12 .cse9 .cse13) (and .cse14 .cse8 .cse12 .cse9 .cse13) .cse3 .cse4)) (or .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse10)))) [2022-02-20 18:12:46,632 INFO L854 garLoopResultBuilder]: At program point L429(lines 424 432) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2022-02-20 18:12:46,632 INFO L858 garLoopResultBuilder]: For program point L974-1(line 974) no Hoare annotation was computed. [2022-02-20 18:12:46,632 INFO L854 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2022-02-20 18:12:46,632 INFO L858 garLoopResultBuilder]: For program point L438(line 438) no Hoare annotation was computed. [2022-02-20 18:12:46,632 INFO L854 garLoopResultBuilder]: At program point L145(line 145) the Hoare annotation is: (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:46,632 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 126 150) the Hoare annotation is: (let ((.cse13 (<= 1 ~pumpRunning~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse15 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse8 (and .cse11 .cse1 .cse2 .cse15 .cse14 .cse16 .cse4)) (.cse0 (not .cse14)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (and .cse13 .cse6 .cse15 .cse14 .cse16 .cse4)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse6 .cse3 .cse4) .cse7)) (or (not (= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse5 .cse9 .cse10) (or .cse11 (and .cse1 .cse12) .cse0 .cse7 (and .cse13 (= 2 ~waterLevel~0) .cse12)) (or (and .cse6 .cse12 .cse4) .cse8 .cse0 .cse5 (and .cse11 .cse1 .cse2 .cse14 .cse12 .cse4) .cse9 .cse7 .cse10)))) [2022-02-20 18:12:46,633 INFO L858 garLoopResultBuilder]: For program point L79-1(lines 79 85) no Hoare annotation was computed. [2022-02-20 18:12:46,633 INFO L854 garLoopResultBuilder]: At program point L257(lines 242 260) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and (<= 1 ~pumpRunning~0) .cse2 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse7)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse0 .cse1 .cse5 .cse6) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse4)))) [2022-02-20 18:12:46,633 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse5)))) [2022-02-20 18:12:46,633 INFO L858 garLoopResultBuilder]: For program point L959-1(line 959) no Hoare annotation was computed. [2022-02-20 18:12:46,633 INFO L854 garLoopResultBuilder]: At program point L439(lines 434 441) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2022-02-20 18:12:46,633 INFO L854 garLoopResultBuilder]: At program point L406(lines 401 409) the Hoare annotation is: (let ((.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse19 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and .cse19 .cse7 .cse0 .cse16 .cse14 .cse20 .cse4)) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (and .cse0 .cse12 .cse1 .cse2 .cse16 .cse14 .cse20 .cse4)) (.cse5 (not .cse14)) (.cse13 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) .cse5 .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 .cse0 .cse3 .cse4) .cse8)) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse9 .cse10 .cse11) (or (and .cse12 .cse1 .cse2 .cse13 .cse14 .cse15 .cse4) .cse5 .cse6 .cse9 (and .cse7 .cse13 .cse15 .cse4) .cse8 .cse10 .cse11) (let ((.cse17 (= 2 ~waterLevel~0)) (.cse18 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse12 .cse5 (and .cse1 .cse13 .cse16 .cse15) (and .cse1 .cse17 .cse18 .cse15) .cse8 (and .cse19 .cse17 .cse18 .cse15)))))) [2022-02-20 18:12:46,633 INFO L858 garLoopResultBuilder]: For program point L976(lines 976 986) no Hoare annotation was computed. [2022-02-20 18:12:46,633 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 65 91) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse5)))) [2022-02-20 18:12:46,633 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 989) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L854 garLoopResultBuilder]: At program point L972-1(lines 964 992) the Hoare annotation is: (let ((.cse19 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse22 (<= ~waterLevel~0 1)) (.cse5 (= 1 ~systemActive~0)) (.cse23 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (and .cse3 .cse4 .cse9 .cse10 .cse22 .cse5 .cse23 .cse7 .cse8)) (.cse0 (not .cse5)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse17 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|))) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (and .cse19 .cse2 .cse3 .cse4 .cse22 .cse5 .cse23 .cse7 .cse8)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (let ((.cse6 (= ~waterLevel~0 1))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse4 .cse9 .cse10 .cse5 .cse6 .cse7 .cse8) .cse11)) (or .cse12 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse13 .cse14) (or .cse15 .cse4 .cse0 (and .cse9 .cse16 .cse17 .cse18)) (let ((.cse20 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (or .cse4 (and .cse19 .cse20 .cse18 .cse21) .cse0 (and .cse9 .cse20 .cse18 .cse21) .cse11 (not (<= 2 |old(~waterLevel~0)|)))) (or .cse15 .cse12 .cse0 .cse1 (and .cse4 .cse9 .cse10 .cse16 .cse5 .cse17 .cse18 .cse7) (and .cse2 .cse4 .cse16 .cse5 .cse17 .cse18 .cse7) .cse13 .cse14)))) [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 91) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 438) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point L72(lines 72 78) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point L72-2(lines 68 90) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point L134(lines 134 142) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point L130(lines 130 147) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L854 garLoopResultBuilder]: At program point L287(line 287) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse4 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3))) [2022-02-20 18:12:46,634 INFO L861 garLoopResultBuilder]: At program point L539(lines 520 542) the Hoare annotation is: true [2022-02-20 18:12:46,634 INFO L854 garLoopResultBuilder]: At program point L502(lines 498 504) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:46,634 INFO L854 garLoopResultBuilder]: At program point L321(lines 274 322) the Hoare annotation is: false [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:12:46,634 INFO L858 garLoopResultBuilder]: For program point L276(lines 275 320) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L305(lines 305 316) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L297(line 297) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L574(lines 569 577) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L318(lines 275 320) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse4 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3))) [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L285(lines 285 291) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L566(lines 562 568) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L277(lines 277 281) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L951(lines 946 953) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 315) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L311-2(lines 305 316) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L530(lines 530 537) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L858 garLoopResultBuilder]: For program point L530-2(lines 530 537) no Hoare annotation was computed. [2022-02-20 18:12:46,635 INFO L854 garLoopResultBuilder]: At program point L559(lines 555 561) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:46,636 INFO L858 garLoopResultBuilder]: For program point L295(lines 295 301) no Hoare annotation was computed. [2022-02-20 18:12:46,637 INFO L858 garLoopResultBuilder]: For program point L295-1(lines 295 301) no Hoare annotation was computed. [2022-02-20 18:12:46,637 INFO L861 garLoopResultBuilder]: At program point L324(lines 265 328) the Hoare annotation is: true [2022-02-20 18:12:46,637 INFO L861 garLoopResultBuilder]: At program point L514(lines 506 516) the Hoare annotation is: true [2022-02-20 18:12:46,637 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 100 124) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (= 2 ~waterLevel~0))))) [2022-02-20 18:12:46,637 INFO L854 garLoopResultBuilder]: At program point L114(line 114) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:46,637 INFO L854 garLoopResultBuilder]: At program point L238(lines 223 241) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:46,640 INFO L858 garLoopResultBuilder]: For program point L108(lines 108 116) no Hoare annotation was computed. [2022-02-20 18:12:46,640 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 121) no Hoare annotation was computed. [2022-02-20 18:12:46,640 INFO L858 garLoopResultBuilder]: For program point L232(lines 232 236) no Hoare annotation was computed. [2022-02-20 18:12:46,640 INFO L858 garLoopResultBuilder]: For program point L232-2(lines 232 236) no Hoare annotation was computed. [2022-02-20 18:12:46,641 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 420) no Hoare annotation was computed. [2022-02-20 18:12:46,641 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:46,641 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 100 124) no Hoare annotation was computed. [2022-02-20 18:12:46,641 INFO L854 garLoopResultBuilder]: At program point L119(line 119) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-02-20 18:12:46,641 INFO L858 garLoopResultBuilder]: For program point L119-1(lines 100 124) no Hoare annotation was computed. [2022-02-20 18:12:46,641 INFO L854 garLoopResultBuilder]: At program point L419(lines 410 423) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (and .cse1 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:46,641 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 345 356) no Hoare annotation was computed. [2022-02-20 18:12:46,642 INFO L858 garLoopResultBuilder]: For program point L349-1(lines 345 356) no Hoare annotation was computed. [2022-02-20 18:12:46,642 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 345 356) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse2 (not (<= |old(~waterLevel~0)| 2))))) [2022-02-20 18:12:46,642 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 178 186) no Hoare annotation was computed. [2022-02-20 18:12:46,642 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 178 186) the Hoare annotation is: true [2022-02-20 18:12:46,642 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 178 186) no Hoare annotation was computed. [2022-02-20 18:12:46,647 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:46,650 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:12:46,652 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:46,653 WARN L170 areAnnotationChecker]: L361-1 has no Hoare annotation [2022-02-20 18:12:46,653 WARN L170 areAnnotationChecker]: L361-1 has no Hoare annotation [2022-02-20 18:12:46,655 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: L104 has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: L349-1 has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: L349-1 has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: L361-1 has no Hoare annotation [2022-02-20 18:12:46,656 WARN L170 areAnnotationChecker]: L450-1 has no Hoare annotation [2022-02-20 18:12:46,657 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-02-20 18:12:46,657 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:12:46,657 WARN L170 areAnnotationChecker]: L104 has no Hoare annotation [2022-02-20 18:12:46,657 WARN L170 areAnnotationChecker]: L104 has no Hoare annotation [2022-02-20 18:12:46,657 WARN L170 areAnnotationChecker]: L349-1 has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: L119-1 has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: L450-1 has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: L414 has no Hoare annotation [2022-02-20 18:12:46,658 WARN L170 areAnnotationChecker]: L414 has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: L119-1 has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: L455 has no Hoare annotation [2022-02-20 18:12:46,659 WARN L170 areAnnotationChecker]: L72 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: L232 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: L285-1 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: L974-1 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: L79-1 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: L305 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: L305 has no Hoare annotation [2022-02-20 18:12:46,660 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L455 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L72 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L72 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L530 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L232 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L232 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L295 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L295 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L976 has no Hoare annotation [2022-02-20 18:12:46,661 WARN L170 areAnnotationChecker]: L976 has no Hoare annotation [2022-02-20 18:12:46,662 WARN L170 areAnnotationChecker]: L79-1 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L311 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L311 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L458 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L458 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L72-2 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L72-2 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L530 has no Hoare annotation [2022-02-20 18:12:46,663 WARN L170 areAnnotationChecker]: L530 has no Hoare annotation [2022-02-20 18:12:46,664 WARN L170 areAnnotationChecker]: L232-2 has no Hoare annotation [2022-02-20 18:12:46,664 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2022-02-20 18:12:46,664 WARN L170 areAnnotationChecker]: L977 has no Hoare annotation [2022-02-20 18:12:46,664 WARN L170 areAnnotationChecker]: L977 has no Hoare annotation [2022-02-20 18:12:46,664 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:46,664 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:12:46,666 WARN L170 areAnnotationChecker]: L276 has no Hoare annotation [2022-02-20 18:12:46,666 WARN L170 areAnnotationChecker]: L465 has no Hoare annotation [2022-02-20 18:12:46,667 WARN L170 areAnnotationChecker]: L72-2 has no Hoare annotation [2022-02-20 18:12:46,667 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-02-20 18:12:46,667 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: L530-2 has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: L108 has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: L438 has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: L438 has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:12:46,668 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:12:46,669 WARN L170 areAnnotationChecker]: L276 has no Hoare annotation [2022-02-20 18:12:46,669 WARN L170 areAnnotationChecker]: L276 has no Hoare annotation [2022-02-20 18:12:46,669 WARN L170 areAnnotationChecker]: L530-2 has no Hoare annotation [2022-02-20 18:12:46,669 WARN L170 areAnnotationChecker]: L465 has no Hoare annotation [2022-02-20 18:12:46,669 WARN L170 areAnnotationChecker]: L251 has no Hoare annotation [2022-02-20 18:12:46,670 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:46,670 WARN L170 areAnnotationChecker]: L108 has no Hoare annotation [2022-02-20 18:12:46,670 WARN L170 areAnnotationChecker]: L108 has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: L974-1 has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: L277 has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: L251 has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: L251 has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:46,673 WARN L170 areAnnotationChecker]: L119-1 has no Hoare annotation [2022-02-20 18:12:46,674 WARN L170 areAnnotationChecker]: L119-1 has no Hoare annotation [2022-02-20 18:12:46,674 WARN L170 areAnnotationChecker]: L285 has no Hoare annotation [2022-02-20 18:12:46,674 WARN L170 areAnnotationChecker]: L285 has no Hoare annotation [2022-02-20 18:12:46,674 WARN L170 areAnnotationChecker]: L251-2 has no Hoare annotation [2022-02-20 18:12:46,674 WARN L170 areAnnotationChecker]: L285-1 has no Hoare annotation [2022-02-20 18:12:46,675 WARN L170 areAnnotationChecker]: L134 has no Hoare annotation [2022-02-20 18:12:46,675 WARN L170 areAnnotationChecker]: L134 has no Hoare annotation [2022-02-20 18:12:46,675 WARN L170 areAnnotationChecker]: L134 has no Hoare annotation [2022-02-20 18:12:46,678 INFO L163 areAnnotationChecker]: CFG has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:12:46,735 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:12:46 BoogieIcfgContainer [2022-02-20 18:12:46,735 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:12:46,736 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:12:46,736 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:12:46,736 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:12:46,736 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:17" (3/4) ... [2022-02-20 18:12:46,739 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:12:46,744 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:12:46,744 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:12:46,744 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:12:46,744 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:12:46,745 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:46,745 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:12:46,745 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:12:46,760 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-02-20 18:12:46,761 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:12:46,761 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:12:46,762 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:12:46,762 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:12:46,763 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:46,763 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:46,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:46,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:46,789 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(\old(waterLevel) <= 2)) && (((((((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && !(2 <= tmp)) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:46,789 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:46,789 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:46,789 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result <= waterLevel && pumpRunning == 0) && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) [2022-02-20 18:12:46,790 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:46,790 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:12:46,790 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:46,790 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\result == 0 && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:12:46,790 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:46,790 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:12:46,816 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:12:46,816 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:12:46,817 INFO L158 Benchmark]: Toolchain (without parser) took 30605.04ms. Allocated memory was 153.1MB in the beginning and 369.1MB in the end (delta: 216.0MB). Free memory was 115.6MB in the beginning and 269.1MB in the end (delta: -153.5MB). Peak memory consumption was 61.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:46,817 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 153.1MB. Free memory was 125.9MB in the beginning and 125.9MB in the end (delta: 29.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:46,817 INFO L158 Benchmark]: CACSL2BoogieTranslator took 525.64ms. Allocated memory is still 153.1MB. Free memory was 115.6MB in the beginning and 115.0MB in the end (delta: 565.0kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-02-20 18:12:46,818 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.96ms. Allocated memory is still 153.1MB. Free memory was 115.0MB in the beginning and 111.6MB in the end (delta: 3.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:46,820 INFO L158 Benchmark]: Boogie Preprocessor took 39.25ms. Allocated memory is still 153.1MB. Free memory was 111.6MB in the beginning and 110.4MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:46,821 INFO L158 Benchmark]: RCFGBuilder took 467.61ms. Allocated memory is still 153.1MB. Free memory was 110.4MB in the beginning and 89.4MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-02-20 18:12:46,821 INFO L158 Benchmark]: TraceAbstraction took 29414.07ms. Allocated memory was 153.1MB in the beginning and 369.1MB in the end (delta: 216.0MB). Free memory was 88.6MB in the beginning and 275.4MB in the end (delta: -186.8MB). Peak memory consumption was 189.5MB. Max. memory is 16.1GB. [2022-02-20 18:12:46,821 INFO L158 Benchmark]: Witness Printer took 80.80ms. Allocated memory is still 369.1MB. Free memory was 275.4MB in the beginning and 269.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:12:46,822 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 153.1MB. Free memory was 125.9MB in the beginning and 125.9MB in the end (delta: 29.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 525.64ms. Allocated memory is still 153.1MB. Free memory was 115.6MB in the beginning and 115.0MB in the end (delta: 565.0kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.96ms. Allocated memory is still 153.1MB. Free memory was 115.0MB in the beginning and 111.6MB in the end (delta: 3.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.25ms. Allocated memory is still 153.1MB. Free memory was 111.6MB in the beginning and 110.4MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 467.61ms. Allocated memory is still 153.1MB. Free memory was 110.4MB in the beginning and 89.4MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 29414.07ms. Allocated memory was 153.1MB in the beginning and 369.1MB in the end (delta: 216.0MB). Free memory was 88.6MB in the beginning and 275.4MB in the end (delta: -186.8MB). Peak memory consumption was 189.5MB. Max. memory is 16.1GB. * Witness Printer took 80.80ms. Allocated memory is still 369.1MB. Free memory was 275.4MB in the beginning and 269.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 438]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 92 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 29.3s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 15.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2709 SdHoareTripleChecker+Valid, 3.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2667 mSDsluCounter, 5129 SdHoareTripleChecker+Invalid, 3.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3753 mSDsCounter, 879 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3204 IncrementalHoareTripleChecker+Invalid, 4083 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 879 mSolverCounterUnsat, 1376 mSDtfsCounter, 3204 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 819 GetRequests, 655 SyntacticMatches, 6 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1095 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=580occurred in iteration=10, InterpolantAutomatonStates: 139, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 11 MinimizatonAttempts, 253 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1395 PreInvPairs, 1661 NumberOfFragments, 2742 HoareAnnotationTreeSize, 1395 FomulaSimplifications, 4812 FormulaSimplificationTreeSizeReduction, 1.5s HoareSimplificationTime, 42 FomulaSimplificationsInter, 22388 FormulaSimplificationTreeSizeReductionInter, 4.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.5s InterpolantComputationTime, 956 NumberOfCodeBlocks, 956 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1209 ConstructedInterpolants, 0 QuantifiedInterpolants, 2424 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1145 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 616/696 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 520]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 401]: Loop Invariant Derived loop invariant: (((((((((((\result <= waterLevel && pumpRunning == 0) && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 223]: Loop Invariant Derived loop invariant: (((((\result == 0 && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 242]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 562]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 424]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(\old(waterLevel) <= 2)) && (((((((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && !(2 <= tmp)) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 333]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:12:46,885 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE