./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4074665f53184e0f9778b3e4e6ee9c58d8a047121518f9c126ceccd876afea36 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:12:21,632 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:12:21,635 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:12:21,671 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:12:21,671 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:12:21,674 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:12:21,675 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:12:21,677 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:12:21,678 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:12:21,681 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:12:21,682 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:12:21,683 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:12:21,683 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:12:21,685 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:12:21,686 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:12:21,688 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:12:21,688 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:12:21,689 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:12:21,690 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:12:21,695 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:12:21,696 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:12:21,696 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:12:21,698 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:12:21,698 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:12:21,701 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:12:21,702 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:12:21,702 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:12:21,702 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:12:21,703 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:12:21,703 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:12:21,703 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:12:21,704 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:12:21,705 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:12:21,706 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:12:21,707 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:12:21,707 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:12:21,707 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:12:21,708 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:12:21,708 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:12:21,708 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:12:21,709 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:12:21,710 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:12:21,732 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:12:21,733 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:12:21,733 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:12:21,733 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:12:21,734 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:12:21,734 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:12:21,734 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:12:21,735 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:12:21,735 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:12:21,735 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:12:21,736 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:12:21,737 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:12:21,737 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:12:21,737 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:12:21,737 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:12:21,737 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:12:21,737 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:12:21,738 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:12:21,738 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:12:21,738 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:12:21,738 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:12:21,739 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:12:21,739 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:12:21,739 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:12:21,739 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:12:21,739 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:12:21,740 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:12:21,740 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4074665f53184e0f9778b3e4e6ee9c58d8a047121518f9c126ceccd876afea36 [2022-02-20 18:12:21,916 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:12:21,934 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:12:21,938 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:12:21,939 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:12:21,940 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:12:21,941 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c [2022-02-20 18:12:21,987 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b7c783638/d3b717988d1f4b13a50972cbfc857b78/FLAGf4679c013 [2022-02-20 18:12:22,338 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:12:22,338 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c [2022-02-20 18:12:22,357 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b7c783638/d3b717988d1f4b13a50972cbfc857b78/FLAGf4679c013 [2022-02-20 18:12:22,745 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b7c783638/d3b717988d1f4b13a50972cbfc857b78 [2022-02-20 18:12:22,747 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:12:22,748 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:12:22,749 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:12:22,749 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:12:22,751 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:12:22,752 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:12:22" (1/1) ... [2022-02-20 18:12:22,753 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3517f2ab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:22, skipping insertion in model container [2022-02-20 18:12:22,753 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:12:22" (1/1) ... [2022-02-20 18:12:22,757 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:12:22,787 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:12:22,975 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2022-02-20 18:12:23,014 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:12:23,020 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:12:23,057 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2022-02-20 18:12:23,085 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:12:23,106 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:12:23,106 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23 WrapperNode [2022-02-20 18:12:23,107 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:12:23,108 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:12:23,108 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:12:23,108 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:12:23,113 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,133 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,161 INFO L137 Inliner]: procedures = 59, calls = 160, calls flagged for inlining = 26, calls inlined = 22, statements flattened = 268 [2022-02-20 18:12:23,166 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:12:23,167 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:12:23,167 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:12:23,168 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:12:23,173 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,174 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,187 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,187 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,192 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,195 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,197 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,198 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:12:23,199 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:12:23,199 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:12:23,199 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:12:23,206 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (1/1) ... [2022-02-20 18:12:23,211 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:12:23,218 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:23,229 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:12:23,230 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:12:23,252 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:12:23,257 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:12:23,257 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:12:23,257 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:12:23,258 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:12:23,258 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:12:23,258 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:12:23,258 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:23,258 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:23,258 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:12:23,258 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:12:23,258 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:12:23,259 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:12:23,259 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:12:23,259 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:12:23,259 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:12:23,259 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:12:23,259 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:12:23,259 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:12:23,259 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:12:23,316 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:12:23,317 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:12:23,623 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:12:23,629 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:12:23,629 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:12:23,631 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:23 BoogieIcfgContainer [2022-02-20 18:12:23,631 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:12:23,632 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:12:23,632 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:12:23,634 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:12:23,635 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:12:22" (1/3) ... [2022-02-20 18:12:23,635 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f15f1f3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:12:23, skipping insertion in model container [2022-02-20 18:12:23,635 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:23" (2/3) ... [2022-02-20 18:12:23,636 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f15f1f3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:12:23, skipping insertion in model container [2022-02-20 18:12:23,636 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:23" (3/3) ... [2022-02-20 18:12:23,637 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product52.cil.c [2022-02-20 18:12:23,640 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:12:23,640 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:12:23,671 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:12:23,676 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:12:23,676 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:12:23,692 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:12:23,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:12:23,705 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:23,706 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:23,706 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:23,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:23,713 INFO L85 PathProgramCache]: Analyzing trace with hash 1209028345, now seen corresponding path program 1 times [2022-02-20 18:12:23,719 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:23,719 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842158376] [2022-02-20 18:12:23,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:23,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:23,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:12:23,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,886 INFO L290 TraceCheckUtils]: 0: Hoare triple {103#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {103#true} is VALID [2022-02-20 18:12:23,886 INFO L290 TraceCheckUtils]: 1: Hoare triple {103#true} assume true; {103#true} is VALID [2022-02-20 18:12:23,886 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {103#true} {104#false} #252#return; {104#false} is VALID [2022-02-20 18:12:23,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:12:23,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:23,896 INFO L290 TraceCheckUtils]: 0: Hoare triple {103#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {103#true} is VALID [2022-02-20 18:12:23,896 INFO L290 TraceCheckUtils]: 1: Hoare triple {103#true} assume true; {103#true} is VALID [2022-02-20 18:12:23,896 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {103#true} {104#false} #260#return; {104#false} is VALID [2022-02-20 18:12:23,897 INFO L290 TraceCheckUtils]: 0: Hoare triple {103#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {103#true} is VALID [2022-02-20 18:12:23,897 INFO L290 TraceCheckUtils]: 1: Hoare triple {103#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {103#true} is VALID [2022-02-20 18:12:23,898 INFO L290 TraceCheckUtils]: 2: Hoare triple {103#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {103#true} is VALID [2022-02-20 18:12:23,898 INFO L290 TraceCheckUtils]: 3: Hoare triple {103#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {103#true} is VALID [2022-02-20 18:12:23,898 INFO L290 TraceCheckUtils]: 4: Hoare triple {103#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {103#true} is VALID [2022-02-20 18:12:23,898 INFO L290 TraceCheckUtils]: 5: Hoare triple {103#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {103#true} is VALID [2022-02-20 18:12:23,899 INFO L290 TraceCheckUtils]: 6: Hoare triple {103#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {103#true} is VALID [2022-02-20 18:12:23,899 INFO L290 TraceCheckUtils]: 7: Hoare triple {103#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {103#true} is VALID [2022-02-20 18:12:23,899 INFO L290 TraceCheckUtils]: 8: Hoare triple {103#true} assume !true; {104#false} is VALID [2022-02-20 18:12:23,900 INFO L272 TraceCheckUtils]: 9: Hoare triple {104#false} call cleanup(); {104#false} is VALID [2022-02-20 18:12:23,900 INFO L290 TraceCheckUtils]: 10: Hoare triple {104#false} havoc ~i~0;havoc ~__cil_tmp2~0; {104#false} is VALID [2022-02-20 18:12:23,900 INFO L272 TraceCheckUtils]: 11: Hoare triple {104#false} call timeShift(); {104#false} is VALID [2022-02-20 18:12:23,900 INFO L290 TraceCheckUtils]: 12: Hoare triple {104#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {104#false} is VALID [2022-02-20 18:12:23,901 INFO L272 TraceCheckUtils]: 13: Hoare triple {104#false} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {103#true} is VALID [2022-02-20 18:12:23,901 INFO L290 TraceCheckUtils]: 14: Hoare triple {103#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {103#true} is VALID [2022-02-20 18:12:23,901 INFO L290 TraceCheckUtils]: 15: Hoare triple {103#true} assume true; {103#true} is VALID [2022-02-20 18:12:23,901 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {103#true} {104#false} #252#return; {104#false} is VALID [2022-02-20 18:12:23,902 INFO L290 TraceCheckUtils]: 17: Hoare triple {104#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {104#false} is VALID [2022-02-20 18:12:23,902 INFO L290 TraceCheckUtils]: 18: Hoare triple {104#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {104#false} is VALID [2022-02-20 18:12:23,902 INFO L290 TraceCheckUtils]: 19: Hoare triple {104#false} assume !(0 != ~pumpRunning~0); {104#false} is VALID [2022-02-20 18:12:23,902 INFO L290 TraceCheckUtils]: 20: Hoare triple {104#false} assume !(0 != ~systemActive~0); {104#false} is VALID [2022-02-20 18:12:23,903 INFO L290 TraceCheckUtils]: 21: Hoare triple {104#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {104#false} is VALID [2022-02-20 18:12:23,903 INFO L290 TraceCheckUtils]: 22: Hoare triple {104#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {104#false} is VALID [2022-02-20 18:12:23,903 INFO L290 TraceCheckUtils]: 23: Hoare triple {104#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {104#false} is VALID [2022-02-20 18:12:23,903 INFO L272 TraceCheckUtils]: 24: Hoare triple {104#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {103#true} is VALID [2022-02-20 18:12:23,903 INFO L290 TraceCheckUtils]: 25: Hoare triple {103#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {103#true} is VALID [2022-02-20 18:12:23,904 INFO L290 TraceCheckUtils]: 26: Hoare triple {103#true} assume true; {103#true} is VALID [2022-02-20 18:12:23,904 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {103#true} {104#false} #260#return; {104#false} is VALID [2022-02-20 18:12:23,904 INFO L290 TraceCheckUtils]: 28: Hoare triple {104#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {104#false} is VALID [2022-02-20 18:12:23,904 INFO L290 TraceCheckUtils]: 29: Hoare triple {104#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {104#false} is VALID [2022-02-20 18:12:23,905 INFO L290 TraceCheckUtils]: 30: Hoare triple {104#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {104#false} is VALID [2022-02-20 18:12:23,905 INFO L290 TraceCheckUtils]: 31: Hoare triple {104#false} assume !false; {104#false} is VALID [2022-02-20 18:12:23,905 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:23,906 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:23,906 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842158376] [2022-02-20 18:12:23,907 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842158376] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:23,907 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:23,907 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:12:23,908 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [892427008] [2022-02-20 18:12:23,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:23,913 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:12:23,914 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:23,916 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:23,967 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:23,967 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:12:23,968 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:23,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:12:23,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:12:23,987 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,095 INFO L93 Difference]: Finished difference Result 191 states and 258 transitions. [2022-02-20 18:12:24,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:12:24,096 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:12:24,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:24,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 258 transitions. [2022-02-20 18:12:24,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 258 transitions. [2022-02-20 18:12:24,118 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 258 transitions. [2022-02-20 18:12:24,313 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 258 edges. 258 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:24,327 INFO L225 Difference]: With dead ends: 191 [2022-02-20 18:12:24,327 INFO L226 Difference]: Without dead ends: 91 [2022-02-20 18:12:24,331 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:12:24,339 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:24,341 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:24,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-02-20 18:12:24,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-02-20 18:12:24,377 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:24,380 INFO L82 GeneralOperation]: Start isEquivalent. First operand 91 states. Second operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:12:24,382 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:12:24,384 INFO L87 Difference]: Start difference. First operand 91 states. Second operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:12:24,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,404 INFO L93 Difference]: Finished difference Result 91 states and 117 transitions. [2022-02-20 18:12:24,404 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-02-20 18:12:24,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:24,407 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:24,408 INFO L74 IsIncluded]: Start isIncluded. First operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand 91 states. [2022-02-20 18:12:24,409 INFO L87 Difference]: Start difference. First operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand 91 states. [2022-02-20 18:12:24,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,422 INFO L93 Difference]: Finished difference Result 91 states and 117 transitions. [2022-02-20 18:12:24,422 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-02-20 18:12:24,424 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:24,424 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:24,424 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:24,424 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:24,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:12:24,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2022-02-20 18:12:24,431 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 32 [2022-02-20 18:12:24,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:24,432 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2022-02-20 18:12:24,432 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,432 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-02-20 18:12:24,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-02-20 18:12:24,434 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:24,434 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:24,434 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:12:24,434 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:24,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:24,435 INFO L85 PathProgramCache]: Analyzing trace with hash 819571873, now seen corresponding path program 1 times [2022-02-20 18:12:24,435 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:24,435 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796371342] [2022-02-20 18:12:24,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:24,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:24,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:12:24,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,513 INFO L290 TraceCheckUtils]: 0: Hoare triple {704#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {704#true} is VALID [2022-02-20 18:12:24,513 INFO L290 TraceCheckUtils]: 1: Hoare triple {704#true} assume true; {704#true} is VALID [2022-02-20 18:12:24,513 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {704#true} {705#false} #252#return; {705#false} is VALID [2022-02-20 18:12:24,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:12:24,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,517 INFO L290 TraceCheckUtils]: 0: Hoare triple {704#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {704#true} is VALID [2022-02-20 18:12:24,518 INFO L290 TraceCheckUtils]: 1: Hoare triple {704#true} assume true; {704#true} is VALID [2022-02-20 18:12:24,518 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {704#true} {705#false} #260#return; {705#false} is VALID [2022-02-20 18:12:24,518 INFO L290 TraceCheckUtils]: 0: Hoare triple {704#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {704#true} is VALID [2022-02-20 18:12:24,518 INFO L290 TraceCheckUtils]: 1: Hoare triple {704#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {704#true} is VALID [2022-02-20 18:12:24,518 INFO L290 TraceCheckUtils]: 2: Hoare triple {704#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {704#true} is VALID [2022-02-20 18:12:24,519 INFO L290 TraceCheckUtils]: 3: Hoare triple {704#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {704#true} is VALID [2022-02-20 18:12:24,519 INFO L290 TraceCheckUtils]: 4: Hoare triple {704#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {704#true} is VALID [2022-02-20 18:12:24,519 INFO L290 TraceCheckUtils]: 5: Hoare triple {704#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {704#true} is VALID [2022-02-20 18:12:24,519 INFO L290 TraceCheckUtils]: 6: Hoare triple {704#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {704#true} is VALID [2022-02-20 18:12:24,520 INFO L290 TraceCheckUtils]: 7: Hoare triple {704#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {706#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:24,527 INFO L290 TraceCheckUtils]: 8: Hoare triple {706#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {706#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:24,529 INFO L290 TraceCheckUtils]: 9: Hoare triple {706#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {705#false} is VALID [2022-02-20 18:12:24,530 INFO L272 TraceCheckUtils]: 10: Hoare triple {705#false} call cleanup(); {705#false} is VALID [2022-02-20 18:12:24,530 INFO L290 TraceCheckUtils]: 11: Hoare triple {705#false} havoc ~i~0;havoc ~__cil_tmp2~0; {705#false} is VALID [2022-02-20 18:12:24,530 INFO L272 TraceCheckUtils]: 12: Hoare triple {705#false} call timeShift(); {705#false} is VALID [2022-02-20 18:12:24,530 INFO L290 TraceCheckUtils]: 13: Hoare triple {705#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {705#false} is VALID [2022-02-20 18:12:24,530 INFO L272 TraceCheckUtils]: 14: Hoare triple {705#false} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {704#true} is VALID [2022-02-20 18:12:24,531 INFO L290 TraceCheckUtils]: 15: Hoare triple {704#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {704#true} is VALID [2022-02-20 18:12:24,531 INFO L290 TraceCheckUtils]: 16: Hoare triple {704#true} assume true; {704#true} is VALID [2022-02-20 18:12:24,532 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {704#true} {705#false} #252#return; {705#false} is VALID [2022-02-20 18:12:24,532 INFO L290 TraceCheckUtils]: 18: Hoare triple {705#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {705#false} is VALID [2022-02-20 18:12:24,532 INFO L290 TraceCheckUtils]: 19: Hoare triple {705#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {705#false} is VALID [2022-02-20 18:12:24,532 INFO L290 TraceCheckUtils]: 20: Hoare triple {705#false} assume !(0 != ~pumpRunning~0); {705#false} is VALID [2022-02-20 18:12:24,533 INFO L290 TraceCheckUtils]: 21: Hoare triple {705#false} assume !(0 != ~systemActive~0); {705#false} is VALID [2022-02-20 18:12:24,533 INFO L290 TraceCheckUtils]: 22: Hoare triple {705#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {705#false} is VALID [2022-02-20 18:12:24,533 INFO L290 TraceCheckUtils]: 23: Hoare triple {705#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {705#false} is VALID [2022-02-20 18:12:24,533 INFO L290 TraceCheckUtils]: 24: Hoare triple {705#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {705#false} is VALID [2022-02-20 18:12:24,534 INFO L272 TraceCheckUtils]: 25: Hoare triple {705#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {704#true} is VALID [2022-02-20 18:12:24,534 INFO L290 TraceCheckUtils]: 26: Hoare triple {704#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {704#true} is VALID [2022-02-20 18:12:24,534 INFO L290 TraceCheckUtils]: 27: Hoare triple {704#true} assume true; {704#true} is VALID [2022-02-20 18:12:24,534 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {704#true} {705#false} #260#return; {705#false} is VALID [2022-02-20 18:12:24,535 INFO L290 TraceCheckUtils]: 29: Hoare triple {705#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {705#false} is VALID [2022-02-20 18:12:24,535 INFO L290 TraceCheckUtils]: 30: Hoare triple {705#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {705#false} is VALID [2022-02-20 18:12:24,535 INFO L290 TraceCheckUtils]: 31: Hoare triple {705#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {705#false} is VALID [2022-02-20 18:12:24,535 INFO L290 TraceCheckUtils]: 32: Hoare triple {705#false} assume !false; {705#false} is VALID [2022-02-20 18:12:24,536 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:24,536 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:24,536 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796371342] [2022-02-20 18:12:24,536 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796371342] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:24,537 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:24,537 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:24,537 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385785103] [2022-02-20 18:12:24,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:24,538 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:12:24,539 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:24,539 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,560 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:24,560 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:24,561 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:24,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:24,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:24,562 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,668 INFO L93 Difference]: Finished difference Result 142 states and 182 transitions. [2022-02-20 18:12:24,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:24,668 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:12:24,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:24,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 182 transitions. [2022-02-20 18:12:24,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 182 transitions. [2022-02-20 18:12:24,680 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 182 transitions. [2022-02-20 18:12:24,814 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 182 edges. 182 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:24,817 INFO L225 Difference]: With dead ends: 142 [2022-02-20 18:12:24,817 INFO L226 Difference]: Without dead ends: 82 [2022-02-20 18:12:24,817 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:24,818 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 17 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:24,819 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 186 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:24,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-02-20 18:12:24,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-02-20 18:12:24,825 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:24,826 INFO L82 GeneralOperation]: Start isEquivalent. First operand 82 states. Second operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:24,826 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:24,827 INFO L87 Difference]: Start difference. First operand 82 states. Second operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:24,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,829 INFO L93 Difference]: Finished difference Result 82 states and 105 transitions. [2022-02-20 18:12:24,829 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-02-20 18:12:24,829 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:24,829 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:24,830 INFO L74 IsIncluded]: Start isIncluded. First operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 82 states. [2022-02-20 18:12:24,830 INFO L87 Difference]: Start difference. First operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 82 states. [2022-02-20 18:12:24,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:24,832 INFO L93 Difference]: Finished difference Result 82 states and 105 transitions. [2022-02-20 18:12:24,832 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-02-20 18:12:24,833 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:24,833 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:24,833 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:24,833 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:24,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:24,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-02-20 18:12:24,835 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 33 [2022-02-20 18:12:24,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:24,836 INFO L470 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-02-20 18:12:24,836 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:24,836 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-02-20 18:12:24,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-02-20 18:12:24,837 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:24,837 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:24,837 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:12:24,837 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:24,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:24,837 INFO L85 PathProgramCache]: Analyzing trace with hash -1285533544, now seen corresponding path program 1 times [2022-02-20 18:12:24,837 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:24,838 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1400466081] [2022-02-20 18:12:24,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:24,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:24,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:12:24,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,909 INFO L290 TraceCheckUtils]: 0: Hoare triple {1202#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1202#true} is VALID [2022-02-20 18:12:24,909 INFO L290 TraceCheckUtils]: 1: Hoare triple {1202#true} assume true; {1202#true} is VALID [2022-02-20 18:12:24,910 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1202#true} {1206#(not (= 0 ~systemActive~0))} #252#return; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-02-20 18:12:24,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:24,914 INFO L290 TraceCheckUtils]: 0: Hoare triple {1202#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1202#true} is VALID [2022-02-20 18:12:24,914 INFO L290 TraceCheckUtils]: 1: Hoare triple {1202#true} assume true; {1202#true} is VALID [2022-02-20 18:12:24,914 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1202#true} {1203#false} #260#return; {1203#false} is VALID [2022-02-20 18:12:24,914 INFO L290 TraceCheckUtils]: 0: Hoare triple {1202#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1202#true} is VALID [2022-02-20 18:12:24,914 INFO L290 TraceCheckUtils]: 1: Hoare triple {1202#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {1202#true} is VALID [2022-02-20 18:12:24,915 INFO L290 TraceCheckUtils]: 2: Hoare triple {1202#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1202#true} is VALID [2022-02-20 18:12:24,915 INFO L290 TraceCheckUtils]: 3: Hoare triple {1202#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1204#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:12:24,916 INFO L290 TraceCheckUtils]: 4: Hoare triple {1204#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {1205#(= |ULTIMATE.start_main_~tmp~3#1| 1)} is VALID [2022-02-20 18:12:24,916 INFO L290 TraceCheckUtils]: 5: Hoare triple {1205#(= |ULTIMATE.start_main_~tmp~3#1| 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {1202#true} is VALID [2022-02-20 18:12:24,916 INFO L290 TraceCheckUtils]: 6: Hoare triple {1202#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1202#true} is VALID [2022-02-20 18:12:24,916 INFO L290 TraceCheckUtils]: 7: Hoare triple {1202#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1202#true} is VALID [2022-02-20 18:12:24,916 INFO L290 TraceCheckUtils]: 8: Hoare triple {1202#true} assume !false; {1202#true} is VALID [2022-02-20 18:12:24,917 INFO L290 TraceCheckUtils]: 9: Hoare triple {1202#true} assume test_~splverifierCounter~0#1 < 4; {1202#true} is VALID [2022-02-20 18:12:24,917 INFO L290 TraceCheckUtils]: 10: Hoare triple {1202#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {1202#true} is VALID [2022-02-20 18:12:24,917 INFO L290 TraceCheckUtils]: 11: Hoare triple {1202#true} assume !(0 != test_~tmp~5#1); {1202#true} is VALID [2022-02-20 18:12:24,917 INFO L290 TraceCheckUtils]: 12: Hoare triple {1202#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {1202#true} is VALID [2022-02-20 18:12:24,917 INFO L290 TraceCheckUtils]: 13: Hoare triple {1202#true} assume !(0 != test_~tmp___0~1#1); {1202#true} is VALID [2022-02-20 18:12:24,917 INFO L290 TraceCheckUtils]: 14: Hoare triple {1202#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {1202#true} is VALID [2022-02-20 18:12:24,918 INFO L290 TraceCheckUtils]: 15: Hoare triple {1202#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,918 INFO L290 TraceCheckUtils]: 16: Hoare triple {1206#(not (= 0 ~systemActive~0))} assume { :end_inline_startSystem } true; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,919 INFO L272 TraceCheckUtils]: 17: Hoare triple {1206#(not (= 0 ~systemActive~0))} call timeShift(); {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,919 INFO L290 TraceCheckUtils]: 18: Hoare triple {1206#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,919 INFO L272 TraceCheckUtils]: 19: Hoare triple {1206#(not (= 0 ~systemActive~0))} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {1202#true} is VALID [2022-02-20 18:12:24,919 INFO L290 TraceCheckUtils]: 20: Hoare triple {1202#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1202#true} is VALID [2022-02-20 18:12:24,920 INFO L290 TraceCheckUtils]: 21: Hoare triple {1202#true} assume true; {1202#true} is VALID [2022-02-20 18:12:24,920 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {1202#true} {1206#(not (= 0 ~systemActive~0))} #252#return; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,920 INFO L290 TraceCheckUtils]: 23: Hoare triple {1206#(not (= 0 ~systemActive~0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,921 INFO L290 TraceCheckUtils]: 24: Hoare triple {1206#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,921 INFO L290 TraceCheckUtils]: 25: Hoare triple {1206#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1206#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:24,922 INFO L290 TraceCheckUtils]: 26: Hoare triple {1206#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1203#false} is VALID [2022-02-20 18:12:24,922 INFO L290 TraceCheckUtils]: 27: Hoare triple {1203#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {1203#false} is VALID [2022-02-20 18:12:24,922 INFO L290 TraceCheckUtils]: 28: Hoare triple {1203#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {1203#false} is VALID [2022-02-20 18:12:24,922 INFO L290 TraceCheckUtils]: 29: Hoare triple {1203#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {1203#false} is VALID [2022-02-20 18:12:24,922 INFO L272 TraceCheckUtils]: 30: Hoare triple {1203#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {1202#true} is VALID [2022-02-20 18:12:24,922 INFO L290 TraceCheckUtils]: 31: Hoare triple {1202#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1202#true} is VALID [2022-02-20 18:12:24,923 INFO L290 TraceCheckUtils]: 32: Hoare triple {1202#true} assume true; {1202#true} is VALID [2022-02-20 18:12:24,923 INFO L284 TraceCheckUtils]: 33: Hoare quadruple {1202#true} {1203#false} #260#return; {1203#false} is VALID [2022-02-20 18:12:24,924 INFO L290 TraceCheckUtils]: 34: Hoare triple {1203#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {1203#false} is VALID [2022-02-20 18:12:24,924 INFO L290 TraceCheckUtils]: 35: Hoare triple {1203#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {1203#false} is VALID [2022-02-20 18:12:24,925 INFO L290 TraceCheckUtils]: 36: Hoare triple {1203#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1203#false} is VALID [2022-02-20 18:12:24,925 INFO L290 TraceCheckUtils]: 37: Hoare triple {1203#false} assume !false; {1203#false} is VALID [2022-02-20 18:12:24,932 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:24,932 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:24,932 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1400466081] [2022-02-20 18:12:24,932 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1400466081] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:24,933 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:24,933 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:24,933 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442384807] [2022-02-20 18:12:24,933 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:24,933 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-02-20 18:12:24,934 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:24,934 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:24,957 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:24,957 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:24,957 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:24,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:24,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:24,958 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:25,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:25,225 INFO L93 Difference]: Finished difference Result 203 states and 264 transitions. [2022-02-20 18:12:25,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:12:25,226 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-02-20 18:12:25,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:25,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:25,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 264 transitions. [2022-02-20 18:12:25,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:25,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 264 transitions. [2022-02-20 18:12:25,235 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 264 transitions. [2022-02-20 18:12:25,393 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:25,396 INFO L225 Difference]: With dead ends: 203 [2022-02-20 18:12:25,396 INFO L226 Difference]: Without dead ends: 129 [2022-02-20 18:12:25,397 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:12:25,397 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 166 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:25,398 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 359 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:25,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-02-20 18:12:25,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 126. [2022-02-20 18:12:25,407 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:25,407 INFO L82 GeneralOperation]: Start isEquivalent. First operand 129 states. Second operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2022-02-20 18:12:25,408 INFO L74 IsIncluded]: Start isIncluded. First operand 129 states. Second operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2022-02-20 18:12:25,408 INFO L87 Difference]: Start difference. First operand 129 states. Second operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2022-02-20 18:12:25,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:25,412 INFO L93 Difference]: Finished difference Result 129 states and 165 transitions. [2022-02-20 18:12:25,412 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 165 transitions. [2022-02-20 18:12:25,412 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:25,412 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:25,413 INFO L74 IsIncluded]: Start isIncluded. First operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) Second operand 129 states. [2022-02-20 18:12:25,413 INFO L87 Difference]: Start difference. First operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) Second operand 129 states. [2022-02-20 18:12:25,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:25,417 INFO L93 Difference]: Finished difference Result 129 states and 165 transitions. [2022-02-20 18:12:25,417 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 165 transitions. [2022-02-20 18:12:25,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:25,417 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:25,417 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:25,417 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:25,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2022-02-20 18:12:25,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 163 transitions. [2022-02-20 18:12:25,424 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 163 transitions. Word has length 38 [2022-02-20 18:12:25,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:25,424 INFO L470 AbstractCegarLoop]: Abstraction has 126 states and 163 transitions. [2022-02-20 18:12:25,425 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:25,425 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 163 transitions. [2022-02-20 18:12:25,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-20 18:12:25,426 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:25,426 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:25,427 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:12:25,427 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:25,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:25,429 INFO L85 PathProgramCache]: Analyzing trace with hash -1848173569, now seen corresponding path program 1 times [2022-02-20 18:12:25,429 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:25,429 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909795710] [2022-02-20 18:12:25,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:25,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:25,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:25,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:25,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:25,545 INFO L290 TraceCheckUtils]: 0: Hoare triple {1945#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1945#true} is VALID [2022-02-20 18:12:25,547 INFO L290 TraceCheckUtils]: 1: Hoare triple {1945#true} assume true; {1945#true} is VALID [2022-02-20 18:12:25,548 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1945#true} {1947#(= ~pumpRunning~0 0)} #252#return; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-02-20 18:12:25,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:25,563 INFO L290 TraceCheckUtils]: 0: Hoare triple {1945#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:25,564 INFO L290 TraceCheckUtils]: 1: Hoare triple {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:25,564 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} {1947#(= ~pumpRunning~0 0)} #260#return; {1954#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret30#1|)} is VALID [2022-02-20 18:12:25,565 INFO L290 TraceCheckUtils]: 0: Hoare triple {1945#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,565 INFO L290 TraceCheckUtils]: 1: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,566 INFO L290 TraceCheckUtils]: 2: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,566 INFO L290 TraceCheckUtils]: 3: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,566 INFO L290 TraceCheckUtils]: 4: Hoare triple {1947#(= ~pumpRunning~0 0)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,567 INFO L290 TraceCheckUtils]: 5: Hoare triple {1947#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,567 INFO L290 TraceCheckUtils]: 6: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,567 INFO L290 TraceCheckUtils]: 7: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,568 INFO L290 TraceCheckUtils]: 8: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !false; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,568 INFO L290 TraceCheckUtils]: 9: Hoare triple {1947#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,568 INFO L290 TraceCheckUtils]: 10: Hoare triple {1947#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,568 INFO L290 TraceCheckUtils]: 11: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,569 INFO L290 TraceCheckUtils]: 12: Hoare triple {1947#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,569 INFO L290 TraceCheckUtils]: 13: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~1#1); {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,569 INFO L290 TraceCheckUtils]: 14: Hoare triple {1947#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,570 INFO L290 TraceCheckUtils]: 15: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,570 INFO L290 TraceCheckUtils]: 16: Hoare triple {1947#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,571 INFO L290 TraceCheckUtils]: 17: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,571 INFO L290 TraceCheckUtils]: 18: Hoare triple {1947#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,571 INFO L290 TraceCheckUtils]: 19: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,572 INFO L272 TraceCheckUtils]: 20: Hoare triple {1947#(= ~pumpRunning~0 0)} call timeShift(); {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,572 INFO L290 TraceCheckUtils]: 21: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,572 INFO L272 TraceCheckUtils]: 22: Hoare triple {1947#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {1945#true} is VALID [2022-02-20 18:12:25,572 INFO L290 TraceCheckUtils]: 23: Hoare triple {1945#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1945#true} is VALID [2022-02-20 18:12:25,572 INFO L290 TraceCheckUtils]: 24: Hoare triple {1945#true} assume true; {1945#true} is VALID [2022-02-20 18:12:25,573 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {1945#true} {1947#(= ~pumpRunning~0 0)} #252#return; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,573 INFO L290 TraceCheckUtils]: 26: Hoare triple {1947#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,573 INFO L290 TraceCheckUtils]: 27: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,574 INFO L290 TraceCheckUtils]: 28: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,574 INFO L290 TraceCheckUtils]: 29: Hoare triple {1947#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,574 INFO L290 TraceCheckUtils]: 30: Hoare triple {1947#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,575 INFO L290 TraceCheckUtils]: 31: Hoare triple {1947#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,575 INFO L290 TraceCheckUtils]: 32: Hoare triple {1947#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {1947#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:25,575 INFO L272 TraceCheckUtils]: 33: Hoare triple {1947#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {1945#true} is VALID [2022-02-20 18:12:25,576 INFO L290 TraceCheckUtils]: 34: Hoare triple {1945#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:25,576 INFO L290 TraceCheckUtils]: 35: Hoare triple {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:25,577 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {1956#(= ~pumpRunning~0 |isPumpRunning_#res|)} {1947#(= ~pumpRunning~0 0)} #260#return; {1954#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret30#1|)} is VALID [2022-02-20 18:12:25,577 INFO L290 TraceCheckUtils]: 37: Hoare triple {1954#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret30#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {1955#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:25,577 INFO L290 TraceCheckUtils]: 38: Hoare triple {1955#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {1946#false} is VALID [2022-02-20 18:12:25,577 INFO L290 TraceCheckUtils]: 39: Hoare triple {1946#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1946#false} is VALID [2022-02-20 18:12:25,578 INFO L290 TraceCheckUtils]: 40: Hoare triple {1946#false} assume !false; {1946#false} is VALID [2022-02-20 18:12:25,579 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:12:25,579 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:25,579 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909795710] [2022-02-20 18:12:25,579 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909795710] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:25,579 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:25,579 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:25,580 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1064340914] [2022-02-20 18:12:25,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:25,581 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-02-20 18:12:25,582 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:25,582 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:25,618 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:25,618 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:25,618 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:25,619 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:25,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:25,620 INFO L87 Difference]: Start difference. First operand 126 states and 163 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:25,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:25,946 INFO L93 Difference]: Finished difference Result 292 states and 389 transitions. [2022-02-20 18:12:25,947 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:12:25,947 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-02-20 18:12:25,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:25,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:25,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 274 transitions. [2022-02-20 18:12:25,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:25,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 274 transitions. [2022-02-20 18:12:25,953 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 274 transitions. [2022-02-20 18:12:26,132 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 274 edges. 274 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:26,135 INFO L225 Difference]: With dead ends: 292 [2022-02-20 18:12:26,135 INFO L226 Difference]: Without dead ends: 174 [2022-02-20 18:12:26,136 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:12:26,136 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 50 mSDsluCounter, 384 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 502 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:26,137 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [51 Valid, 502 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:26,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2022-02-20 18:12:26,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 164. [2022-02-20 18:12:26,145 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:26,146 INFO L82 GeneralOperation]: Start isEquivalent. First operand 174 states. Second operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2022-02-20 18:12:26,146 INFO L74 IsIncluded]: Start isIncluded. First operand 174 states. Second operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2022-02-20 18:12:26,147 INFO L87 Difference]: Start difference. First operand 174 states. Second operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2022-02-20 18:12:26,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,151 INFO L93 Difference]: Finished difference Result 174 states and 221 transitions. [2022-02-20 18:12:26,151 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 221 transitions. [2022-02-20 18:12:26,152 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,152 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:26,152 INFO L74 IsIncluded]: Start isIncluded. First operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) Second operand 174 states. [2022-02-20 18:12:26,153 INFO L87 Difference]: Start difference. First operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) Second operand 174 states. [2022-02-20 18:12:26,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,157 INFO L93 Difference]: Finished difference Result 174 states and 221 transitions. [2022-02-20 18:12:26,157 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 221 transitions. [2022-02-20 18:12:26,157 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,157 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:26,157 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:26,157 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:26,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2022-02-20 18:12:26,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 207 transitions. [2022-02-20 18:12:26,176 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 207 transitions. Word has length 41 [2022-02-20 18:12:26,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:26,177 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 207 transitions. [2022-02-20 18:12:26,177 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:26,177 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 207 transitions. [2022-02-20 18:12:26,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:26,178 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:26,178 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:26,178 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:12:26,178 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:26,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:26,178 INFO L85 PathProgramCache]: Analyzing trace with hash 410003619, now seen corresponding path program 1 times [2022-02-20 18:12:26,178 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:26,178 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1289594844] [2022-02-20 18:12:26,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:26,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:26,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:26,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,242 INFO L290 TraceCheckUtils]: 0: Hoare triple {2951#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {2951#true} is VALID [2022-02-20 18:12:26,242 INFO L290 TraceCheckUtils]: 1: Hoare triple {2951#true} assume true; {2951#true} is VALID [2022-02-20 18:12:26,242 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2951#true} {2953#(= 0 ~systemActive~0)} #252#return; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-02-20 18:12:26,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,251 INFO L290 TraceCheckUtils]: 0: Hoare triple {2971#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {2951#true} is VALID [2022-02-20 18:12:26,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {2951#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {2951#true} is VALID [2022-02-20 18:12:26,251 INFO L290 TraceCheckUtils]: 2: Hoare triple {2951#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {2951#true} is VALID [2022-02-20 18:12:26,252 INFO L290 TraceCheckUtils]: 3: Hoare triple {2951#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {2951#true} is VALID [2022-02-20 18:12:26,252 INFO L290 TraceCheckUtils]: 4: Hoare triple {2951#true} assume 0 != isHighWaterLevel_~tmp~8#1;isHighWaterLevel_~tmp___0~2#1 := 0; {2951#true} is VALID [2022-02-20 18:12:26,252 INFO L290 TraceCheckUtils]: 5: Hoare triple {2951#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {2951#true} is VALID [2022-02-20 18:12:26,252 INFO L290 TraceCheckUtils]: 6: Hoare triple {2951#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {2951#true} is VALID [2022-02-20 18:12:26,252 INFO L290 TraceCheckUtils]: 7: Hoare triple {2951#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2951#true} is VALID [2022-02-20 18:12:26,252 INFO L290 TraceCheckUtils]: 8: Hoare triple {2951#true} assume { :end_inline_activatePump } true; {2951#true} is VALID [2022-02-20 18:12:26,253 INFO L290 TraceCheckUtils]: 9: Hoare triple {2951#true} assume true; {2951#true} is VALID [2022-02-20 18:12:26,253 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2951#true} {2952#false} #258#return; {2952#false} is VALID [2022-02-20 18:12:26,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:26,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,255 INFO L290 TraceCheckUtils]: 0: Hoare triple {2951#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {2951#true} is VALID [2022-02-20 18:12:26,256 INFO L290 TraceCheckUtils]: 1: Hoare triple {2951#true} assume true; {2951#true} is VALID [2022-02-20 18:12:26,256 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2951#true} {2952#false} #260#return; {2952#false} is VALID [2022-02-20 18:12:26,256 INFO L290 TraceCheckUtils]: 0: Hoare triple {2951#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2951#true} is VALID [2022-02-20 18:12:26,256 INFO L290 TraceCheckUtils]: 1: Hoare triple {2951#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {2951#true} is VALID [2022-02-20 18:12:26,256 INFO L290 TraceCheckUtils]: 2: Hoare triple {2951#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2951#true} is VALID [2022-02-20 18:12:26,256 INFO L290 TraceCheckUtils]: 3: Hoare triple {2951#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {2951#true} is VALID [2022-02-20 18:12:26,256 INFO L290 TraceCheckUtils]: 4: Hoare triple {2951#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 5: Hoare triple {2951#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 6: Hoare triple {2951#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 7: Hoare triple {2951#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 8: Hoare triple {2951#true} assume !false; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 9: Hoare triple {2951#true} assume test_~splverifierCounter~0#1 < 4; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 10: Hoare triple {2951#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 11: Hoare triple {2951#true} assume !(0 != test_~tmp~5#1); {2951#true} is VALID [2022-02-20 18:12:26,257 INFO L290 TraceCheckUtils]: 12: Hoare triple {2951#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {2951#true} is VALID [2022-02-20 18:12:26,258 INFO L290 TraceCheckUtils]: 13: Hoare triple {2951#true} assume !(0 != test_~tmp___0~1#1); {2951#true} is VALID [2022-02-20 18:12:26,258 INFO L290 TraceCheckUtils]: 14: Hoare triple {2951#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {2951#true} is VALID [2022-02-20 18:12:26,258 INFO L290 TraceCheckUtils]: 15: Hoare triple {2951#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {2951#true} is VALID [2022-02-20 18:12:26,258 INFO L290 TraceCheckUtils]: 16: Hoare triple {2951#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {2951#true} is VALID [2022-02-20 18:12:26,258 INFO L290 TraceCheckUtils]: 17: Hoare triple {2951#true} assume !(0 != ~pumpRunning~0); {2951#true} is VALID [2022-02-20 18:12:26,258 INFO L290 TraceCheckUtils]: 18: Hoare triple {2951#true} ~systemActive~0 := 0; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,259 INFO L290 TraceCheckUtils]: 19: Hoare triple {2953#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,259 INFO L272 TraceCheckUtils]: 20: Hoare triple {2953#(= 0 ~systemActive~0)} call timeShift(); {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,260 INFO L290 TraceCheckUtils]: 21: Hoare triple {2953#(= 0 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,260 INFO L272 TraceCheckUtils]: 22: Hoare triple {2953#(= 0 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {2951#true} is VALID [2022-02-20 18:12:26,260 INFO L290 TraceCheckUtils]: 23: Hoare triple {2951#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {2951#true} is VALID [2022-02-20 18:12:26,260 INFO L290 TraceCheckUtils]: 24: Hoare triple {2951#true} assume true; {2951#true} is VALID [2022-02-20 18:12:26,260 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {2951#true} {2953#(= 0 ~systemActive~0)} #252#return; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,261 INFO L290 TraceCheckUtils]: 26: Hoare triple {2953#(= 0 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,261 INFO L290 TraceCheckUtils]: 27: Hoare triple {2953#(= 0 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,261 INFO L290 TraceCheckUtils]: 28: Hoare triple {2953#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {2953#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:26,262 INFO L290 TraceCheckUtils]: 29: Hoare triple {2953#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {2952#false} is VALID [2022-02-20 18:12:26,262 INFO L290 TraceCheckUtils]: 30: Hoare triple {2952#false} assume !(0 != ~pumpRunning~0); {2952#false} is VALID [2022-02-20 18:12:26,262 INFO L272 TraceCheckUtils]: 31: Hoare triple {2952#false} call processEnvironment__wrappee__highWaterSensor(); {2971#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:26,262 INFO L290 TraceCheckUtils]: 32: Hoare triple {2971#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {2951#true} is VALID [2022-02-20 18:12:26,262 INFO L290 TraceCheckUtils]: 33: Hoare triple {2951#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {2951#true} is VALID [2022-02-20 18:12:26,262 INFO L290 TraceCheckUtils]: 34: Hoare triple {2951#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 35: Hoare triple {2951#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 36: Hoare triple {2951#true} assume 0 != isHighWaterLevel_~tmp~8#1;isHighWaterLevel_~tmp___0~2#1 := 0; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 37: Hoare triple {2951#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 38: Hoare triple {2951#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 39: Hoare triple {2951#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 40: Hoare triple {2951#true} assume { :end_inline_activatePump } true; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L290 TraceCheckUtils]: 41: Hoare triple {2951#true} assume true; {2951#true} is VALID [2022-02-20 18:12:26,263 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {2951#true} {2952#false} #258#return; {2952#false} is VALID [2022-02-20 18:12:26,264 INFO L290 TraceCheckUtils]: 43: Hoare triple {2952#false} assume { :end_inline_processEnvironment } true; {2952#false} is VALID [2022-02-20 18:12:26,264 INFO L290 TraceCheckUtils]: 44: Hoare triple {2952#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {2952#false} is VALID [2022-02-20 18:12:26,264 INFO L290 TraceCheckUtils]: 45: Hoare triple {2952#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {2952#false} is VALID [2022-02-20 18:12:26,264 INFO L290 TraceCheckUtils]: 46: Hoare triple {2952#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {2952#false} is VALID [2022-02-20 18:12:26,264 INFO L272 TraceCheckUtils]: 47: Hoare triple {2952#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {2951#true} is VALID [2022-02-20 18:12:26,264 INFO L290 TraceCheckUtils]: 48: Hoare triple {2951#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {2951#true} is VALID [2022-02-20 18:12:26,264 INFO L290 TraceCheckUtils]: 49: Hoare triple {2951#true} assume true; {2951#true} is VALID [2022-02-20 18:12:26,265 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {2951#true} {2952#false} #260#return; {2952#false} is VALID [2022-02-20 18:12:26,265 INFO L290 TraceCheckUtils]: 51: Hoare triple {2952#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {2952#false} is VALID [2022-02-20 18:12:26,265 INFO L290 TraceCheckUtils]: 52: Hoare triple {2952#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {2952#false} is VALID [2022-02-20 18:12:26,265 INFO L290 TraceCheckUtils]: 53: Hoare triple {2952#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {2952#false} is VALID [2022-02-20 18:12:26,265 INFO L290 TraceCheckUtils]: 54: Hoare triple {2952#false} assume !false; {2952#false} is VALID [2022-02-20 18:12:26,265 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:26,265 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:26,266 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1289594844] [2022-02-20 18:12:26,266 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1289594844] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:26,266 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:26,266 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:12:26,266 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145074376] [2022-02-20 18:12:26,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:26,267 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:26,267 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:26,267 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:26,310 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:26,310 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:12:26,310 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:26,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:12:26,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:12:26,311 INFO L87 Difference]: Start difference. First operand 164 states and 207 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:26,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,553 INFO L93 Difference]: Finished difference Result 347 states and 438 transitions. [2022-02-20 18:12:26,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:12:26,554 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:26,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:26,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:26,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 268 transitions. [2022-02-20 18:12:26,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:26,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 268 transitions. [2022-02-20 18:12:26,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 268 transitions. [2022-02-20 18:12:26,712 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 268 edges. 268 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:26,715 INFO L225 Difference]: With dead ends: 347 [2022-02-20 18:12:26,715 INFO L226 Difference]: Without dead ends: 191 [2022-02-20 18:12:26,716 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:26,716 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 93 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:26,717 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [100 Valid, 282 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:26,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2022-02-20 18:12:26,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 187. [2022-02-20 18:12:26,737 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:26,738 INFO L82 GeneralOperation]: Start isEquivalent. First operand 191 states. Second operand has 187 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 153 states have internal predecessors, (180), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:26,743 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand has 187 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 153 states have internal predecessors, (180), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:26,747 INFO L87 Difference]: Start difference. First operand 191 states. Second operand has 187 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 153 states have internal predecessors, (180), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:26,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,752 INFO L93 Difference]: Finished difference Result 191 states and 236 transitions. [2022-02-20 18:12:26,752 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 236 transitions. [2022-02-20 18:12:26,752 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,753 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:26,753 INFO L74 IsIncluded]: Start isIncluded. First operand has 187 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 153 states have internal predecessors, (180), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) Second operand 191 states. [2022-02-20 18:12:26,754 INFO L87 Difference]: Start difference. First operand has 187 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 153 states have internal predecessors, (180), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) Second operand 191 states. [2022-02-20 18:12:26,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,759 INFO L93 Difference]: Finished difference Result 191 states and 236 transitions. [2022-02-20 18:12:26,759 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 236 transitions. [2022-02-20 18:12:26,760 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,760 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:26,760 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:26,761 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:26,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 153 states have internal predecessors, (180), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:26,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 233 transitions. [2022-02-20 18:12:26,766 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 233 transitions. Word has length 55 [2022-02-20 18:12:26,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:26,766 INFO L470 AbstractCegarLoop]: Abstraction has 187 states and 233 transitions. [2022-02-20 18:12:26,766 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:26,766 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 233 transitions. [2022-02-20 18:12:26,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-02-20 18:12:26,768 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:26,768 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:26,769 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:12:26,769 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:26,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:26,769 INFO L85 PathProgramCache]: Analyzing trace with hash -1678713476, now seen corresponding path program 1 times [2022-02-20 18:12:26,769 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:26,769 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480753119] [2022-02-20 18:12:26,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:26,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:26,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:12:26,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,837 INFO L290 TraceCheckUtils]: 0: Hoare triple {4102#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {4102#true} is VALID [2022-02-20 18:12:26,838 INFO L290 TraceCheckUtils]: 1: Hoare triple {4102#true} assume true; {4102#true} is VALID [2022-02-20 18:12:26,838 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4102#true} {4102#true} #252#return; {4102#true} is VALID [2022-02-20 18:12:26,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:12:26,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,868 INFO L290 TraceCheckUtils]: 0: Hoare triple {4121#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {4102#true} is VALID [2022-02-20 18:12:26,869 INFO L290 TraceCheckUtils]: 1: Hoare triple {4102#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {4102#true} is VALID [2022-02-20 18:12:26,869 INFO L290 TraceCheckUtils]: 2: Hoare triple {4102#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {4102#true} is VALID [2022-02-20 18:12:26,870 INFO L290 TraceCheckUtils]: 3: Hoare triple {4102#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {4102#true} is VALID [2022-02-20 18:12:26,870 INFO L290 TraceCheckUtils]: 4: Hoare triple {4102#true} assume 0 != isHighWaterLevel_~tmp~8#1;isHighWaterLevel_~tmp___0~2#1 := 0; {4122#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:12:26,872 INFO L290 TraceCheckUtils]: 5: Hoare triple {4122#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {4123#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:26,872 INFO L290 TraceCheckUtils]: 6: Hoare triple {4123#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {4124#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} is VALID [2022-02-20 18:12:26,872 INFO L290 TraceCheckUtils]: 7: Hoare triple {4124#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4103#false} is VALID [2022-02-20 18:12:26,872 INFO L290 TraceCheckUtils]: 8: Hoare triple {4103#false} assume { :end_inline_activatePump } true; {4103#false} is VALID [2022-02-20 18:12:26,873 INFO L290 TraceCheckUtils]: 9: Hoare triple {4103#false} assume true; {4103#false} is VALID [2022-02-20 18:12:26,873 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4103#false} {4102#true} #258#return; {4103#false} is VALID [2022-02-20 18:12:26,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-02-20 18:12:26,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:26,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {4102#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {4102#true} is VALID [2022-02-20 18:12:26,879 INFO L290 TraceCheckUtils]: 1: Hoare triple {4102#true} assume true; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4102#true} {4103#false} #260#return; {4103#false} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 0: Hoare triple {4102#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {4102#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 2: Hoare triple {4102#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 3: Hoare triple {4102#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 4: Hoare triple {4102#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 5: Hoare triple {4102#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {4102#true} is VALID [2022-02-20 18:12:26,880 INFO L290 TraceCheckUtils]: 6: Hoare triple {4102#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 7: Hoare triple {4102#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 8: Hoare triple {4102#true} assume !false; {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 9: Hoare triple {4102#true} assume test_~splverifierCounter~0#1 < 4; {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 10: Hoare triple {4102#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 11: Hoare triple {4102#true} assume !(0 != test_~tmp~5#1); {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 12: Hoare triple {4102#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 13: Hoare triple {4102#true} assume !(0 != test_~tmp___0~1#1); {4102#true} is VALID [2022-02-20 18:12:26,881 INFO L290 TraceCheckUtils]: 14: Hoare triple {4102#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L290 TraceCheckUtils]: 15: Hoare triple {4102#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L290 TraceCheckUtils]: 16: Hoare triple {4102#true} assume { :end_inline_startSystem } true; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L272 TraceCheckUtils]: 17: Hoare triple {4102#true} call timeShift(); {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L290 TraceCheckUtils]: 18: Hoare triple {4102#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L272 TraceCheckUtils]: 19: Hoare triple {4102#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L290 TraceCheckUtils]: 20: Hoare triple {4102#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L290 TraceCheckUtils]: 21: Hoare triple {4102#true} assume true; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {4102#true} {4102#true} #252#return; {4102#true} is VALID [2022-02-20 18:12:26,882 INFO L290 TraceCheckUtils]: 23: Hoare triple {4102#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {4102#true} is VALID [2022-02-20 18:12:26,883 INFO L290 TraceCheckUtils]: 24: Hoare triple {4102#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {4102#true} is VALID [2022-02-20 18:12:26,883 INFO L290 TraceCheckUtils]: 25: Hoare triple {4102#true} assume !(0 != ~pumpRunning~0); {4102#true} is VALID [2022-02-20 18:12:26,883 INFO L290 TraceCheckUtils]: 26: Hoare triple {4102#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {4102#true} is VALID [2022-02-20 18:12:26,883 INFO L290 TraceCheckUtils]: 27: Hoare triple {4102#true} assume !(0 != ~pumpRunning~0); {4102#true} is VALID [2022-02-20 18:12:26,883 INFO L272 TraceCheckUtils]: 28: Hoare triple {4102#true} call processEnvironment__wrappee__highWaterSensor(); {4121#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:26,884 INFO L290 TraceCheckUtils]: 29: Hoare triple {4121#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {4102#true} is VALID [2022-02-20 18:12:26,884 INFO L290 TraceCheckUtils]: 30: Hoare triple {4102#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {4102#true} is VALID [2022-02-20 18:12:26,884 INFO L290 TraceCheckUtils]: 31: Hoare triple {4102#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {4102#true} is VALID [2022-02-20 18:12:26,884 INFO L290 TraceCheckUtils]: 32: Hoare triple {4102#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {4102#true} is VALID [2022-02-20 18:12:26,884 INFO L290 TraceCheckUtils]: 33: Hoare triple {4102#true} assume 0 != isHighWaterLevel_~tmp~8#1;isHighWaterLevel_~tmp___0~2#1 := 0; {4122#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:12:26,885 INFO L290 TraceCheckUtils]: 34: Hoare triple {4122#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {4123#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:26,885 INFO L290 TraceCheckUtils]: 35: Hoare triple {4123#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {4124#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} is VALID [2022-02-20 18:12:26,885 INFO L290 TraceCheckUtils]: 36: Hoare triple {4124#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4103#false} is VALID [2022-02-20 18:12:26,885 INFO L290 TraceCheckUtils]: 37: Hoare triple {4103#false} assume { :end_inline_activatePump } true; {4103#false} is VALID [2022-02-20 18:12:26,885 INFO L290 TraceCheckUtils]: 38: Hoare triple {4103#false} assume true; {4103#false} is VALID [2022-02-20 18:12:26,885 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {4103#false} {4102#true} #258#return; {4103#false} is VALID [2022-02-20 18:12:26,886 INFO L290 TraceCheckUtils]: 40: Hoare triple {4103#false} assume { :end_inline_processEnvironment } true; {4103#false} is VALID [2022-02-20 18:12:26,886 INFO L290 TraceCheckUtils]: 41: Hoare triple {4103#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {4103#false} is VALID [2022-02-20 18:12:26,886 INFO L290 TraceCheckUtils]: 42: Hoare triple {4103#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {4103#false} is VALID [2022-02-20 18:12:26,886 INFO L290 TraceCheckUtils]: 43: Hoare triple {4103#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {4103#false} is VALID [2022-02-20 18:12:26,886 INFO L272 TraceCheckUtils]: 44: Hoare triple {4103#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {4102#true} is VALID [2022-02-20 18:12:26,886 INFO L290 TraceCheckUtils]: 45: Hoare triple {4102#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {4102#true} is VALID [2022-02-20 18:12:26,886 INFO L290 TraceCheckUtils]: 46: Hoare triple {4102#true} assume true; {4102#true} is VALID [2022-02-20 18:12:26,886 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {4102#true} {4103#false} #260#return; {4103#false} is VALID [2022-02-20 18:12:26,887 INFO L290 TraceCheckUtils]: 48: Hoare triple {4103#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {4103#false} is VALID [2022-02-20 18:12:26,887 INFO L290 TraceCheckUtils]: 49: Hoare triple {4103#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {4103#false} is VALID [2022-02-20 18:12:26,887 INFO L290 TraceCheckUtils]: 50: Hoare triple {4103#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {4103#false} is VALID [2022-02-20 18:12:26,887 INFO L290 TraceCheckUtils]: 51: Hoare triple {4103#false} assume !false; {4103#false} is VALID [2022-02-20 18:12:26,888 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:26,889 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:26,889 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480753119] [2022-02-20 18:12:26,889 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [480753119] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:26,889 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:26,889 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:26,889 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [419423583] [2022-02-20 18:12:26,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:26,890 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-02-20 18:12:26,891 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:26,891 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:26,914 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:26,914 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:26,914 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:26,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:26,916 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:26,917 INFO L87 Difference]: Start difference. First operand 187 states and 233 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,298 INFO L93 Difference]: Finished difference Result 374 states and 472 transitions. [2022-02-20 18:12:27,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:27,298 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-02-20 18:12:27,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:27,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 235 transitions. [2022-02-20 18:12:27,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 235 transitions. [2022-02-20 18:12:27,304 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 235 transitions. [2022-02-20 18:12:27,441 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 235 edges. 235 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:27,445 INFO L225 Difference]: With dead ends: 374 [2022-02-20 18:12:27,445 INFO L226 Difference]: Without dead ends: 195 [2022-02-20 18:12:27,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:27,446 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 68 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:27,446 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [71 Valid, 402 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:27,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2022-02-20 18:12:27,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 190. [2022-02-20 18:12:27,453 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:27,454 INFO L82 GeneralOperation]: Start isEquivalent. First operand 195 states. Second operand has 190 states, 146 states have (on average 1.2534246575342465) internal successors, (183), 156 states have internal predecessors, (183), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:27,454 INFO L74 IsIncluded]: Start isIncluded. First operand 195 states. Second operand has 190 states, 146 states have (on average 1.2534246575342465) internal successors, (183), 156 states have internal predecessors, (183), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:27,454 INFO L87 Difference]: Start difference. First operand 195 states. Second operand has 190 states, 146 states have (on average 1.2534246575342465) internal successors, (183), 156 states have internal predecessors, (183), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:27,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,459 INFO L93 Difference]: Finished difference Result 195 states and 242 transitions. [2022-02-20 18:12:27,460 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 242 transitions. [2022-02-20 18:12:27,460 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,460 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:27,461 INFO L74 IsIncluded]: Start isIncluded. First operand has 190 states, 146 states have (on average 1.2534246575342465) internal successors, (183), 156 states have internal predecessors, (183), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) Second operand 195 states. [2022-02-20 18:12:27,461 INFO L87 Difference]: Start difference. First operand has 190 states, 146 states have (on average 1.2534246575342465) internal successors, (183), 156 states have internal predecessors, (183), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) Second operand 195 states. [2022-02-20 18:12:27,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,466 INFO L93 Difference]: Finished difference Result 195 states and 242 transitions. [2022-02-20 18:12:27,466 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 242 transitions. [2022-02-20 18:12:27,466 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,466 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:27,466 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:27,466 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:27,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 146 states have (on average 1.2534246575342465) internal successors, (183), 156 states have internal predecessors, (183), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:27,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 236 transitions. [2022-02-20 18:12:27,471 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 236 transitions. Word has length 52 [2022-02-20 18:12:27,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:27,471 INFO L470 AbstractCegarLoop]: Abstraction has 190 states and 236 transitions. [2022-02-20 18:12:27,472 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,472 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 236 transitions. [2022-02-20 18:12:27,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-02-20 18:12:27,472 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:27,472 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:27,472 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:12:27,472 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:27,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:27,473 INFO L85 PathProgramCache]: Analyzing trace with hash 927310078, now seen corresponding path program 1 times [2022-02-20 18:12:27,473 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:27,473 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803035449] [2022-02-20 18:12:27,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:27,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:27,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:12:27,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {5309#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {5309#true} is VALID [2022-02-20 18:12:27,524 INFO L290 TraceCheckUtils]: 1: Hoare triple {5309#true} assume true; {5309#true} is VALID [2022-02-20 18:12:27,524 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5309#true} {5309#true} #252#return; {5309#true} is VALID [2022-02-20 18:12:27,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:12:27,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {5328#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {5309#true} is VALID [2022-02-20 18:12:27,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {5309#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {5309#true} is VALID [2022-02-20 18:12:27,544 INFO L290 TraceCheckUtils]: 2: Hoare triple {5309#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {5329#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:12:27,545 INFO L290 TraceCheckUtils]: 3: Hoare triple {5329#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {5330#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1|) 0)} is VALID [2022-02-20 18:12:27,545 INFO L290 TraceCheckUtils]: 4: Hoare triple {5330#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {5310#false} is VALID [2022-02-20 18:12:27,545 INFO L290 TraceCheckUtils]: 5: Hoare triple {5310#false} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {5310#false} is VALID [2022-02-20 18:12:27,545 INFO L290 TraceCheckUtils]: 6: Hoare triple {5310#false} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {5310#false} is VALID [2022-02-20 18:12:27,545 INFO L290 TraceCheckUtils]: 7: Hoare triple {5310#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5310#false} is VALID [2022-02-20 18:12:27,546 INFO L290 TraceCheckUtils]: 8: Hoare triple {5310#false} assume { :end_inline_activatePump } true; {5310#false} is VALID [2022-02-20 18:12:27,546 INFO L290 TraceCheckUtils]: 9: Hoare triple {5310#false} assume true; {5310#false} is VALID [2022-02-20 18:12:27,546 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {5310#false} {5309#true} #258#return; {5310#false} is VALID [2022-02-20 18:12:27,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-02-20 18:12:27,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:27,549 INFO L290 TraceCheckUtils]: 0: Hoare triple {5309#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {5309#true} is VALID [2022-02-20 18:12:27,549 INFO L290 TraceCheckUtils]: 1: Hoare triple {5309#true} assume true; {5309#true} is VALID [2022-02-20 18:12:27,550 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5309#true} {5310#false} #260#return; {5310#false} is VALID [2022-02-20 18:12:27,550 INFO L290 TraceCheckUtils]: 0: Hoare triple {5309#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5309#true} is VALID [2022-02-20 18:12:27,550 INFO L290 TraceCheckUtils]: 1: Hoare triple {5309#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {5309#true} is VALID [2022-02-20 18:12:27,550 INFO L290 TraceCheckUtils]: 2: Hoare triple {5309#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5309#true} is VALID [2022-02-20 18:12:27,550 INFO L290 TraceCheckUtils]: 3: Hoare triple {5309#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {5309#true} is VALID [2022-02-20 18:12:27,550 INFO L290 TraceCheckUtils]: 4: Hoare triple {5309#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {5309#true} is VALID [2022-02-20 18:12:27,550 INFO L290 TraceCheckUtils]: 5: Hoare triple {5309#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {5309#true} is VALID [2022-02-20 18:12:27,551 INFO L290 TraceCheckUtils]: 6: Hoare triple {5309#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {5309#true} is VALID [2022-02-20 18:12:27,551 INFO L290 TraceCheckUtils]: 7: Hoare triple {5309#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 8: Hoare triple {5309#true} assume !false; {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 9: Hoare triple {5309#true} assume test_~splverifierCounter~0#1 < 4; {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 10: Hoare triple {5309#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 11: Hoare triple {5309#true} assume !(0 != test_~tmp~5#1); {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 12: Hoare triple {5309#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 13: Hoare triple {5309#true} assume !(0 != test_~tmp___0~1#1); {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 14: Hoare triple {5309#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {5309#true} is VALID [2022-02-20 18:12:27,552 INFO L290 TraceCheckUtils]: 15: Hoare triple {5309#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L290 TraceCheckUtils]: 16: Hoare triple {5309#true} assume { :end_inline_startSystem } true; {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L272 TraceCheckUtils]: 17: Hoare triple {5309#true} call timeShift(); {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L290 TraceCheckUtils]: 18: Hoare triple {5309#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L272 TraceCheckUtils]: 19: Hoare triple {5309#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L290 TraceCheckUtils]: 20: Hoare triple {5309#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L290 TraceCheckUtils]: 21: Hoare triple {5309#true} assume true; {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {5309#true} {5309#true} #252#return; {5309#true} is VALID [2022-02-20 18:12:27,553 INFO L290 TraceCheckUtils]: 23: Hoare triple {5309#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {5309#true} is VALID [2022-02-20 18:12:27,554 INFO L290 TraceCheckUtils]: 24: Hoare triple {5309#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {5309#true} is VALID [2022-02-20 18:12:27,554 INFO L290 TraceCheckUtils]: 25: Hoare triple {5309#true} assume !(0 != ~pumpRunning~0); {5309#true} is VALID [2022-02-20 18:12:27,554 INFO L290 TraceCheckUtils]: 26: Hoare triple {5309#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {5309#true} is VALID [2022-02-20 18:12:27,554 INFO L290 TraceCheckUtils]: 27: Hoare triple {5309#true} assume !(0 != ~pumpRunning~0); {5309#true} is VALID [2022-02-20 18:12:27,554 INFO L272 TraceCheckUtils]: 28: Hoare triple {5309#true} call processEnvironment__wrappee__highWaterSensor(); {5328#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:27,554 INFO L290 TraceCheckUtils]: 29: Hoare triple {5328#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {5309#true} is VALID [2022-02-20 18:12:27,555 INFO L290 TraceCheckUtils]: 30: Hoare triple {5309#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {5309#true} is VALID [2022-02-20 18:12:27,555 INFO L290 TraceCheckUtils]: 31: Hoare triple {5309#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {5329#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:12:27,555 INFO L290 TraceCheckUtils]: 32: Hoare triple {5329#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {5330#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1|) 0)} is VALID [2022-02-20 18:12:27,556 INFO L290 TraceCheckUtils]: 33: Hoare triple {5330#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {5310#false} is VALID [2022-02-20 18:12:27,556 INFO L290 TraceCheckUtils]: 34: Hoare triple {5310#false} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {5310#false} is VALID [2022-02-20 18:12:27,556 INFO L290 TraceCheckUtils]: 35: Hoare triple {5310#false} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {5310#false} is VALID [2022-02-20 18:12:27,556 INFO L290 TraceCheckUtils]: 36: Hoare triple {5310#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5310#false} is VALID [2022-02-20 18:12:27,556 INFO L290 TraceCheckUtils]: 37: Hoare triple {5310#false} assume { :end_inline_activatePump } true; {5310#false} is VALID [2022-02-20 18:12:27,556 INFO L290 TraceCheckUtils]: 38: Hoare triple {5310#false} assume true; {5310#false} is VALID [2022-02-20 18:12:27,557 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {5310#false} {5309#true} #258#return; {5310#false} is VALID [2022-02-20 18:12:27,557 INFO L290 TraceCheckUtils]: 40: Hoare triple {5310#false} assume { :end_inline_processEnvironment } true; {5310#false} is VALID [2022-02-20 18:12:27,563 INFO L290 TraceCheckUtils]: 41: Hoare triple {5310#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {5310#false} is VALID [2022-02-20 18:12:27,564 INFO L290 TraceCheckUtils]: 42: Hoare triple {5310#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {5310#false} is VALID [2022-02-20 18:12:27,565 INFO L290 TraceCheckUtils]: 43: Hoare triple {5310#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {5310#false} is VALID [2022-02-20 18:12:27,565 INFO L272 TraceCheckUtils]: 44: Hoare triple {5310#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {5309#true} is VALID [2022-02-20 18:12:27,565 INFO L290 TraceCheckUtils]: 45: Hoare triple {5309#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {5309#true} is VALID [2022-02-20 18:12:27,565 INFO L290 TraceCheckUtils]: 46: Hoare triple {5309#true} assume true; {5309#true} is VALID [2022-02-20 18:12:27,565 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {5309#true} {5310#false} #260#return; {5310#false} is VALID [2022-02-20 18:12:27,570 INFO L290 TraceCheckUtils]: 48: Hoare triple {5310#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {5310#false} is VALID [2022-02-20 18:12:27,570 INFO L290 TraceCheckUtils]: 49: Hoare triple {5310#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {5310#false} is VALID [2022-02-20 18:12:27,570 INFO L290 TraceCheckUtils]: 50: Hoare triple {5310#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {5310#false} is VALID [2022-02-20 18:12:27,570 INFO L290 TraceCheckUtils]: 51: Hoare triple {5310#false} assume !false; {5310#false} is VALID [2022-02-20 18:12:27,570 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:27,571 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:27,571 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803035449] [2022-02-20 18:12:27,571 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803035449] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:27,571 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:27,572 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:27,572 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [703910479] [2022-02-20 18:12:27,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:27,572 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-02-20 18:12:27,574 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:27,574 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,597 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:27,597 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:27,597 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:27,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:27,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:27,598 INFO L87 Difference]: Start difference. First operand 190 states and 236 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,876 INFO L93 Difference]: Finished difference Result 382 states and 484 transitions. [2022-02-20 18:12:27,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:12:27,876 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-02-20 18:12:27,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:27,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 235 transitions. [2022-02-20 18:12:27,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:27,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 235 transitions. [2022-02-20 18:12:27,880 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 235 transitions. [2022-02-20 18:12:28,024 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 235 edges. 235 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:28,027 INFO L225 Difference]: With dead ends: 382 [2022-02-20 18:12:28,027 INFO L226 Difference]: Without dead ends: 200 [2022-02-20 18:12:28,028 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:28,028 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 69 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:28,029 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [73 Valid, 317 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:28,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2022-02-20 18:12:28,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 192. [2022-02-20 18:12:28,035 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:28,036 INFO L82 GeneralOperation]: Start isEquivalent. First operand 200 states. Second operand has 192 states, 148 states have (on average 1.25) internal successors, (185), 158 states have internal predecessors, (185), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:28,036 INFO L74 IsIncluded]: Start isIncluded. First operand 200 states. Second operand has 192 states, 148 states have (on average 1.25) internal successors, (185), 158 states have internal predecessors, (185), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:28,036 INFO L87 Difference]: Start difference. First operand 200 states. Second operand has 192 states, 148 states have (on average 1.25) internal successors, (185), 158 states have internal predecessors, (185), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:28,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:28,040 INFO L93 Difference]: Finished difference Result 200 states and 247 transitions. [2022-02-20 18:12:28,040 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 247 transitions. [2022-02-20 18:12:28,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:28,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:28,041 INFO L74 IsIncluded]: Start isIncluded. First operand has 192 states, 148 states have (on average 1.25) internal successors, (185), 158 states have internal predecessors, (185), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) Second operand 200 states. [2022-02-20 18:12:28,042 INFO L87 Difference]: Start difference. First operand has 192 states, 148 states have (on average 1.25) internal successors, (185), 158 states have internal predecessors, (185), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) Second operand 200 states. [2022-02-20 18:12:28,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:28,045 INFO L93 Difference]: Finished difference Result 200 states and 247 transitions. [2022-02-20 18:12:28,046 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 247 transitions. [2022-02-20 18:12:28,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:28,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:28,046 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:28,046 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:28,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 148 states have (on average 1.25) internal successors, (185), 158 states have internal predecessors, (185), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (30), 24 states have call predecessors, (30), 23 states have call successors, (30) [2022-02-20 18:12:28,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 238 transitions. [2022-02-20 18:12:28,050 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 238 transitions. Word has length 52 [2022-02-20 18:12:28,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:28,051 INFO L470 AbstractCegarLoop]: Abstraction has 192 states and 238 transitions. [2022-02-20 18:12:28,051 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:28,051 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 238 transitions. [2022-02-20 18:12:28,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-02-20 18:12:28,052 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:28,052 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:28,052 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:12:28,052 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:28,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:28,053 INFO L85 PathProgramCache]: Analyzing trace with hash 1350011904, now seen corresponding path program 1 times [2022-02-20 18:12:28,053 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:28,053 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101739914] [2022-02-20 18:12:28,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:28,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:28,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:28,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:12:28,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:28,096 INFO L290 TraceCheckUtils]: 0: Hoare triple {6535#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {6535#true} is VALID [2022-02-20 18:12:28,096 INFO L290 TraceCheckUtils]: 1: Hoare triple {6535#true} assume true; {6535#true} is VALID [2022-02-20 18:12:28,096 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6535#true} {6537#(= ~waterLevel~0 1)} #252#return; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:12:28,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:28,110 INFO L290 TraceCheckUtils]: 0: Hoare triple {6555#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {6535#true} is VALID [2022-02-20 18:12:28,110 INFO L290 TraceCheckUtils]: 1: Hoare triple {6535#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {6535#true} is VALID [2022-02-20 18:12:28,111 INFO L290 TraceCheckUtils]: 2: Hoare triple {6535#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,111 INFO L290 TraceCheckUtils]: 3: Hoare triple {6556#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,111 INFO L290 TraceCheckUtils]: 4: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,111 INFO L290 TraceCheckUtils]: 5: Hoare triple {6556#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,112 INFO L290 TraceCheckUtils]: 6: Hoare triple {6556#(<= 2 ~waterLevel~0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,112 INFO L290 TraceCheckUtils]: 7: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,112 INFO L290 TraceCheckUtils]: 8: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,112 INFO L290 TraceCheckUtils]: 9: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume true; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,113 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {6556#(<= 2 ~waterLevel~0)} {6537#(= ~waterLevel~0 1)} #258#return; {6536#false} is VALID [2022-02-20 18:12:28,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-02-20 18:12:28,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:28,121 INFO L290 TraceCheckUtils]: 0: Hoare triple {6535#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {6535#true} is VALID [2022-02-20 18:12:28,122 INFO L290 TraceCheckUtils]: 1: Hoare triple {6535#true} assume true; {6535#true} is VALID [2022-02-20 18:12:28,122 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6535#true} {6536#false} #260#return; {6536#false} is VALID [2022-02-20 18:12:28,122 INFO L290 TraceCheckUtils]: 0: Hoare triple {6535#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,122 INFO L290 TraceCheckUtils]: 1: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,123 INFO L290 TraceCheckUtils]: 2: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,123 INFO L290 TraceCheckUtils]: 3: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,123 INFO L290 TraceCheckUtils]: 4: Hoare triple {6537#(= ~waterLevel~0 1)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,123 INFO L290 TraceCheckUtils]: 5: Hoare triple {6537#(= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,124 INFO L290 TraceCheckUtils]: 6: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,124 INFO L290 TraceCheckUtils]: 7: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,124 INFO L290 TraceCheckUtils]: 8: Hoare triple {6537#(= ~waterLevel~0 1)} assume !false; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,124 INFO L290 TraceCheckUtils]: 9: Hoare triple {6537#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,125 INFO L290 TraceCheckUtils]: 10: Hoare triple {6537#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,125 INFO L290 TraceCheckUtils]: 11: Hoare triple {6537#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~5#1); {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,125 INFO L290 TraceCheckUtils]: 12: Hoare triple {6537#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,126 INFO L290 TraceCheckUtils]: 13: Hoare triple {6537#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~1#1); {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,126 INFO L290 TraceCheckUtils]: 14: Hoare triple {6537#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,126 INFO L290 TraceCheckUtils]: 15: Hoare triple {6537#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,126 INFO L290 TraceCheckUtils]: 16: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline_startSystem } true; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,127 INFO L272 TraceCheckUtils]: 17: Hoare triple {6537#(= ~waterLevel~0 1)} call timeShift(); {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,127 INFO L290 TraceCheckUtils]: 18: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,127 INFO L272 TraceCheckUtils]: 19: Hoare triple {6537#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {6535#true} is VALID [2022-02-20 18:12:28,127 INFO L290 TraceCheckUtils]: 20: Hoare triple {6535#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {6535#true} is VALID [2022-02-20 18:12:28,127 INFO L290 TraceCheckUtils]: 21: Hoare triple {6535#true} assume true; {6535#true} is VALID [2022-02-20 18:12:28,127 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {6535#true} {6537#(= ~waterLevel~0 1)} #252#return; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,128 INFO L290 TraceCheckUtils]: 23: Hoare triple {6537#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,128 INFO L290 TraceCheckUtils]: 24: Hoare triple {6537#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,128 INFO L290 TraceCheckUtils]: 25: Hoare triple {6537#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,128 INFO L290 TraceCheckUtils]: 26: Hoare triple {6537#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,129 INFO L290 TraceCheckUtils]: 27: Hoare triple {6537#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {6537#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:28,129 INFO L272 TraceCheckUtils]: 28: Hoare triple {6537#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {6555#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:28,129 INFO L290 TraceCheckUtils]: 29: Hoare triple {6555#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {6535#true} is VALID [2022-02-20 18:12:28,129 INFO L290 TraceCheckUtils]: 30: Hoare triple {6535#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {6535#true} is VALID [2022-02-20 18:12:28,129 INFO L290 TraceCheckUtils]: 31: Hoare triple {6535#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,130 INFO L290 TraceCheckUtils]: 32: Hoare triple {6556#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,130 INFO L290 TraceCheckUtils]: 33: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,130 INFO L290 TraceCheckUtils]: 34: Hoare triple {6556#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,130 INFO L290 TraceCheckUtils]: 35: Hoare triple {6556#(<= 2 ~waterLevel~0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,130 INFO L290 TraceCheckUtils]: 36: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,131 INFO L290 TraceCheckUtils]: 37: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,131 INFO L290 TraceCheckUtils]: 38: Hoare triple {6556#(<= 2 ~waterLevel~0)} assume true; {6556#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:28,131 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {6556#(<= 2 ~waterLevel~0)} {6537#(= ~waterLevel~0 1)} #258#return; {6536#false} is VALID [2022-02-20 18:12:28,131 INFO L290 TraceCheckUtils]: 40: Hoare triple {6536#false} assume { :end_inline_processEnvironment } true; {6536#false} is VALID [2022-02-20 18:12:28,131 INFO L290 TraceCheckUtils]: 41: Hoare triple {6536#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {6536#false} is VALID [2022-02-20 18:12:28,131 INFO L290 TraceCheckUtils]: 42: Hoare triple {6536#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {6536#false} is VALID [2022-02-20 18:12:28,131 INFO L290 TraceCheckUtils]: 43: Hoare triple {6536#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {6536#false} is VALID [2022-02-20 18:12:28,132 INFO L272 TraceCheckUtils]: 44: Hoare triple {6536#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {6535#true} is VALID [2022-02-20 18:12:28,132 INFO L290 TraceCheckUtils]: 45: Hoare triple {6535#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {6535#true} is VALID [2022-02-20 18:12:28,132 INFO L290 TraceCheckUtils]: 46: Hoare triple {6535#true} assume true; {6535#true} is VALID [2022-02-20 18:12:28,132 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {6535#true} {6536#false} #260#return; {6536#false} is VALID [2022-02-20 18:12:28,132 INFO L290 TraceCheckUtils]: 48: Hoare triple {6536#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {6536#false} is VALID [2022-02-20 18:12:28,132 INFO L290 TraceCheckUtils]: 49: Hoare triple {6536#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {6536#false} is VALID [2022-02-20 18:12:28,132 INFO L290 TraceCheckUtils]: 50: Hoare triple {6536#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {6536#false} is VALID [2022-02-20 18:12:28,132 INFO L290 TraceCheckUtils]: 51: Hoare triple {6536#false} assume !false; {6536#false} is VALID [2022-02-20 18:12:28,132 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:28,132 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:28,132 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101739914] [2022-02-20 18:12:28,132 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101739914] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:28,132 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:28,133 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:28,133 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [98674556] [2022-02-20 18:12:28,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:28,133 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-02-20 18:12:28,133 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:28,133 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:28,161 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:28,161 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:28,161 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:28,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:28,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:28,162 INFO L87 Difference]: Start difference. First operand 192 states and 238 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:28,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:28,695 INFO L93 Difference]: Finished difference Result 589 states and 754 transitions. [2022-02-20 18:12:28,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:28,695 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-02-20 18:12:28,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:28,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:28,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 386 transitions. [2022-02-20 18:12:28,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:28,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 386 transitions. [2022-02-20 18:12:28,702 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 386 transitions. [2022-02-20 18:12:28,954 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 386 edges. 386 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:28,965 INFO L225 Difference]: With dead ends: 589 [2022-02-20 18:12:28,965 INFO L226 Difference]: Without dead ends: 405 [2022-02-20 18:12:28,966 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:28,967 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 223 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:28,967 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [230 Valid, 347 Invalid, 219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:28,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 405 states. [2022-02-20 18:12:29,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 405 to 403. [2022-02-20 18:12:29,001 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:29,002 INFO L82 GeneralOperation]: Start isEquivalent. First operand 405 states. Second operand has 403 states, 308 states have (on average 1.2207792207792207) internal successors, (376), 326 states have internal predecessors, (376), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (72), 51 states have call predecessors, (72), 52 states have call successors, (72) [2022-02-20 18:12:29,002 INFO L74 IsIncluded]: Start isIncluded. First operand 405 states. Second operand has 403 states, 308 states have (on average 1.2207792207792207) internal successors, (376), 326 states have internal predecessors, (376), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (72), 51 states have call predecessors, (72), 52 states have call successors, (72) [2022-02-20 18:12:29,003 INFO L87 Difference]: Start difference. First operand 405 states. Second operand has 403 states, 308 states have (on average 1.2207792207792207) internal successors, (376), 326 states have internal predecessors, (376), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (72), 51 states have call predecessors, (72), 52 states have call successors, (72) [2022-02-20 18:12:29,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:29,012 INFO L93 Difference]: Finished difference Result 405 states and 501 transitions. [2022-02-20 18:12:29,012 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 501 transitions. [2022-02-20 18:12:29,013 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:29,013 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:29,014 INFO L74 IsIncluded]: Start isIncluded. First operand has 403 states, 308 states have (on average 1.2207792207792207) internal successors, (376), 326 states have internal predecessors, (376), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (72), 51 states have call predecessors, (72), 52 states have call successors, (72) Second operand 405 states. [2022-02-20 18:12:29,015 INFO L87 Difference]: Start difference. First operand has 403 states, 308 states have (on average 1.2207792207792207) internal successors, (376), 326 states have internal predecessors, (376), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (72), 51 states have call predecessors, (72), 52 states have call successors, (72) Second operand 405 states. [2022-02-20 18:12:29,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:29,024 INFO L93 Difference]: Finished difference Result 405 states and 501 transitions. [2022-02-20 18:12:29,024 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 501 transitions. [2022-02-20 18:12:29,025 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:29,025 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:29,025 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:29,025 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:29,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 403 states, 308 states have (on average 1.2207792207792207) internal successors, (376), 326 states have internal predecessors, (376), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (72), 51 states have call predecessors, (72), 52 states have call successors, (72) [2022-02-20 18:12:29,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 403 states to 403 states and 500 transitions. [2022-02-20 18:12:29,036 INFO L78 Accepts]: Start accepts. Automaton has 403 states and 500 transitions. Word has length 52 [2022-02-20 18:12:29,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:29,036 INFO L470 AbstractCegarLoop]: Abstraction has 403 states and 500 transitions. [2022-02-20 18:12:29,036 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:29,036 INFO L276 IsEmpty]: Start isEmpty. Operand 403 states and 500 transitions. [2022-02-20 18:12:29,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-02-20 18:12:29,037 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:29,037 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:29,037 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:12:29,037 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:29,037 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:29,037 INFO L85 PathProgramCache]: Analyzing trace with hash 338031322, now seen corresponding path program 1 times [2022-02-20 18:12:29,037 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:29,037 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2033378763] [2022-02-20 18:12:29,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:29,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:29,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:29,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:29,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:29,129 INFO L290 TraceCheckUtils]: 0: Hoare triple {8780#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,129 INFO L290 TraceCheckUtils]: 1: Hoare triple {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,130 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {8756#(= ~waterLevel~0 1)} #266#return; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:12:29,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:29,135 INFO L290 TraceCheckUtils]: 0: Hoare triple {8754#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {8754#true} is VALID [2022-02-20 18:12:29,135 INFO L290 TraceCheckUtils]: 1: Hoare triple {8754#true} assume true; {8754#true} is VALID [2022-02-20 18:12:29,135 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8754#true} {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #252#return; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-02-20 18:12:29,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:29,155 INFO L290 TraceCheckUtils]: 0: Hoare triple {8782#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {8754#true} is VALID [2022-02-20 18:12:29,155 INFO L290 TraceCheckUtils]: 1: Hoare triple {8754#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {8754#true} is VALID [2022-02-20 18:12:29,157 INFO L290 TraceCheckUtils]: 2: Hoare triple {8754#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,157 INFO L290 TraceCheckUtils]: 3: Hoare triple {8783#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,157 INFO L290 TraceCheckUtils]: 4: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,157 INFO L290 TraceCheckUtils]: 5: Hoare triple {8783#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,158 INFO L290 TraceCheckUtils]: 6: Hoare triple {8783#(not (<= ~waterLevel~0 1))} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,158 INFO L290 TraceCheckUtils]: 7: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,158 INFO L290 TraceCheckUtils]: 8: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,158 INFO L290 TraceCheckUtils]: 9: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume true; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,159 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {8783#(not (<= ~waterLevel~0 1))} {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #258#return; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-02-20 18:12:29,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:29,161 INFO L290 TraceCheckUtils]: 0: Hoare triple {8754#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {8754#true} is VALID [2022-02-20 18:12:29,161 INFO L290 TraceCheckUtils]: 1: Hoare triple {8754#true} assume true; {8754#true} is VALID [2022-02-20 18:12:29,162 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8754#true} {8755#false} #260#return; {8755#false} is VALID [2022-02-20 18:12:29,162 INFO L290 TraceCheckUtils]: 0: Hoare triple {8754#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,162 INFO L290 TraceCheckUtils]: 1: Hoare triple {8756#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,162 INFO L290 TraceCheckUtils]: 2: Hoare triple {8756#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,163 INFO L290 TraceCheckUtils]: 3: Hoare triple {8756#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,163 INFO L290 TraceCheckUtils]: 4: Hoare triple {8756#(= ~waterLevel~0 1)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,163 INFO L290 TraceCheckUtils]: 5: Hoare triple {8756#(= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,163 INFO L290 TraceCheckUtils]: 6: Hoare triple {8756#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,164 INFO L290 TraceCheckUtils]: 7: Hoare triple {8756#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,164 INFO L290 TraceCheckUtils]: 8: Hoare triple {8756#(= ~waterLevel~0 1)} assume !false; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,164 INFO L290 TraceCheckUtils]: 9: Hoare triple {8756#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,164 INFO L290 TraceCheckUtils]: 10: Hoare triple {8756#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,165 INFO L290 TraceCheckUtils]: 11: Hoare triple {8756#(= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {8756#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:29,165 INFO L272 TraceCheckUtils]: 12: Hoare triple {8756#(= ~waterLevel~0 1)} call waterRise(); {8780#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:29,165 INFO L290 TraceCheckUtils]: 13: Hoare triple {8780#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,166 INFO L290 TraceCheckUtils]: 14: Hoare triple {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,166 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8781#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {8756#(= ~waterLevel~0 1)} #266#return; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,166 INFO L290 TraceCheckUtils]: 16: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,167 INFO L290 TraceCheckUtils]: 17: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~1#1); {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,167 INFO L290 TraceCheckUtils]: 18: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,167 INFO L290 TraceCheckUtils]: 19: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,168 INFO L290 TraceCheckUtils]: 20: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_startSystem } true; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,168 INFO L272 TraceCheckUtils]: 21: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call timeShift(); {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,168 INFO L290 TraceCheckUtils]: 22: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,168 INFO L272 TraceCheckUtils]: 23: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {8754#true} is VALID [2022-02-20 18:12:29,168 INFO L290 TraceCheckUtils]: 24: Hoare triple {8754#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {8754#true} is VALID [2022-02-20 18:12:29,168 INFO L290 TraceCheckUtils]: 25: Hoare triple {8754#true} assume true; {8754#true} is VALID [2022-02-20 18:12:29,169 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {8754#true} {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #252#return; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,169 INFO L290 TraceCheckUtils]: 27: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,169 INFO L290 TraceCheckUtils]: 28: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,170 INFO L290 TraceCheckUtils]: 29: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,170 INFO L290 TraceCheckUtils]: 30: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,170 INFO L290 TraceCheckUtils]: 31: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,171 INFO L272 TraceCheckUtils]: 32: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call processEnvironment__wrappee__highWaterSensor(); {8782#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:29,171 INFO L290 TraceCheckUtils]: 33: Hoare triple {8782#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {8754#true} is VALID [2022-02-20 18:12:29,171 INFO L290 TraceCheckUtils]: 34: Hoare triple {8754#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {8754#true} is VALID [2022-02-20 18:12:29,171 INFO L290 TraceCheckUtils]: 35: Hoare triple {8754#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,171 INFO L290 TraceCheckUtils]: 36: Hoare triple {8783#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,172 INFO L290 TraceCheckUtils]: 37: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,172 INFO L290 TraceCheckUtils]: 38: Hoare triple {8783#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,172 INFO L290 TraceCheckUtils]: 39: Hoare triple {8783#(not (<= ~waterLevel~0 1))} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,172 INFO L290 TraceCheckUtils]: 40: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,172 INFO L290 TraceCheckUtils]: 41: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,173 INFO L290 TraceCheckUtils]: 42: Hoare triple {8783#(not (<= ~waterLevel~0 1))} assume true; {8783#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:29,173 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {8783#(not (<= ~waterLevel~0 1))} {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #258#return; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,173 INFO L290 TraceCheckUtils]: 44: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:29,174 INFO L290 TraceCheckUtils]: 45: Hoare triple {8760#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {8775#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:29,174 INFO L290 TraceCheckUtils]: 46: Hoare triple {8775#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {8776#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)} is VALID [2022-02-20 18:12:29,174 INFO L290 TraceCheckUtils]: 47: Hoare triple {8776#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {8755#false} is VALID [2022-02-20 18:12:29,174 INFO L272 TraceCheckUtils]: 48: Hoare triple {8755#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {8754#true} is VALID [2022-02-20 18:12:29,174 INFO L290 TraceCheckUtils]: 49: Hoare triple {8754#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {8754#true} is VALID [2022-02-20 18:12:29,174 INFO L290 TraceCheckUtils]: 50: Hoare triple {8754#true} assume true; {8754#true} is VALID [2022-02-20 18:12:29,175 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {8754#true} {8755#false} #260#return; {8755#false} is VALID [2022-02-20 18:12:29,175 INFO L290 TraceCheckUtils]: 52: Hoare triple {8755#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {8755#false} is VALID [2022-02-20 18:12:29,175 INFO L290 TraceCheckUtils]: 53: Hoare triple {8755#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {8755#false} is VALID [2022-02-20 18:12:29,175 INFO L290 TraceCheckUtils]: 54: Hoare triple {8755#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {8755#false} is VALID [2022-02-20 18:12:29,175 INFO L290 TraceCheckUtils]: 55: Hoare triple {8755#false} assume !false; {8755#false} is VALID [2022-02-20 18:12:29,175 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:29,175 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:29,175 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2033378763] [2022-02-20 18:12:29,175 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2033378763] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:29,175 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:29,175 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:29,175 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907395156] [2022-02-20 18:12:29,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:29,176 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-02-20 18:12:29,176 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:29,176 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:29,228 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:29,228 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:29,228 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:29,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:29,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:29,229 INFO L87 Difference]: Start difference. First operand 403 states and 500 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:31,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:31,607 INFO L93 Difference]: Finished difference Result 1232 states and 1584 transitions. [2022-02-20 18:12:31,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-02-20 18:12:31,608 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-02-20 18:12:31,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:31,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:31,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 651 transitions. [2022-02-20 18:12:31,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:31,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 651 transitions. [2022-02-20 18:12:31,620 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 33 states and 651 transitions. [2022-02-20 18:12:32,080 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 651 edges. 651 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:32,132 INFO L225 Difference]: With dead ends: 1232 [2022-02-20 18:12:32,132 INFO L226 Difference]: Without dead ends: 925 [2022-02-20 18:12:32,134 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 293 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-02-20 18:12:32,135 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 520 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 871 mSolverCounterSat, 184 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 530 SdHoareTripleChecker+Valid, 1012 SdHoareTripleChecker+Invalid, 1055 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 184 IncrementalHoareTripleChecker+Valid, 871 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:32,135 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [530 Valid, 1012 Invalid, 1055 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [184 Valid, 871 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-02-20 18:12:32,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 925 states. [2022-02-20 18:12:32,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 925 to 747. [2022-02-20 18:12:32,310 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:32,311 INFO L82 GeneralOperation]: Start isEquivalent. First operand 925 states. Second operand has 747 states, 571 states have (on average 1.2189141856392294) internal successors, (696), 608 states have internal predecessors, (696), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) [2022-02-20 18:12:32,312 INFO L74 IsIncluded]: Start isIncluded. First operand 925 states. Second operand has 747 states, 571 states have (on average 1.2189141856392294) internal successors, (696), 608 states have internal predecessors, (696), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) [2022-02-20 18:12:32,313 INFO L87 Difference]: Start difference. First operand 925 states. Second operand has 747 states, 571 states have (on average 1.2189141856392294) internal successors, (696), 608 states have internal predecessors, (696), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) [2022-02-20 18:12:32,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:32,347 INFO L93 Difference]: Finished difference Result 925 states and 1152 transitions. [2022-02-20 18:12:32,347 INFO L276 IsEmpty]: Start isEmpty. Operand 925 states and 1152 transitions. [2022-02-20 18:12:32,349 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:32,349 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:32,357 INFO L74 IsIncluded]: Start isIncluded. First operand has 747 states, 571 states have (on average 1.2189141856392294) internal successors, (696), 608 states have internal predecessors, (696), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) Second operand 925 states. [2022-02-20 18:12:32,359 INFO L87 Difference]: Start difference. First operand has 747 states, 571 states have (on average 1.2189141856392294) internal successors, (696), 608 states have internal predecessors, (696), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) Second operand 925 states. [2022-02-20 18:12:32,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:32,391 INFO L93 Difference]: Finished difference Result 925 states and 1152 transitions. [2022-02-20 18:12:32,392 INFO L276 IsEmpty]: Start isEmpty. Operand 925 states and 1152 transitions. [2022-02-20 18:12:32,394 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:32,394 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:32,394 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:32,394 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:32,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 747 states, 571 states have (on average 1.2189141856392294) internal successors, (696), 608 states have internal predecessors, (696), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) [2022-02-20 18:12:32,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 747 states to 747 states and 926 transitions. [2022-02-20 18:12:32,423 INFO L78 Accepts]: Start accepts. Automaton has 747 states and 926 transitions. Word has length 56 [2022-02-20 18:12:32,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:32,423 INFO L470 AbstractCegarLoop]: Abstraction has 747 states and 926 transitions. [2022-02-20 18:12:32,423 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:32,423 INFO L276 IsEmpty]: Start isEmpty. Operand 747 states and 926 transitions. [2022-02-20 18:12:32,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-02-20 18:12:32,424 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:32,425 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:32,425 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:12:32,425 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:32,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:32,425 INFO L85 PathProgramCache]: Analyzing trace with hash 836408910, now seen corresponding path program 1 times [2022-02-20 18:12:32,426 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:32,426 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1685985047] [2022-02-20 18:12:32,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:32,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:32,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:32,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,519 INFO L290 TraceCheckUtils]: 0: Hoare triple {13487#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13435#true} is VALID [2022-02-20 18:12:32,519 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,519 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13435#true} {13435#true} #266#return; {13435#true} is VALID [2022-02-20 18:12:32,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:12:32,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:32,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,549 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:32,549 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,549 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13435#true} {13435#true} #252#return; {13435#true} is VALID [2022-02-20 18:12:32,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:32,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 0: Hoare triple {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 2: Hoare triple {13435#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 3: Hoare triple {13435#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {13435#true} is VALID [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 4: Hoare triple {13435#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {13435#true} is VALID [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 5: Hoare triple {13435#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {13435#true} is VALID [2022-02-20 18:12:32,564 INFO L290 TraceCheckUtils]: 6: Hoare triple {13435#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {13435#true} is VALID [2022-02-20 18:12:32,565 INFO L290 TraceCheckUtils]: 7: Hoare triple {13435#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,565 INFO L290 TraceCheckUtils]: 8: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,565 INFO L290 TraceCheckUtils]: 9: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,566 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #258#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,566 INFO L290 TraceCheckUtils]: 0: Hoare triple {13488#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:32,566 INFO L272 TraceCheckUtils]: 1: Hoare triple {13435#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:32,566 INFO L290 TraceCheckUtils]: 2: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L290 TraceCheckUtils]: 3: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {13435#true} {13435#true} #252#return; {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L290 TraceCheckUtils]: 5: Hoare triple {13435#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L290 TraceCheckUtils]: 6: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L290 TraceCheckUtils]: 7: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L290 TraceCheckUtils]: 8: Hoare triple {13435#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13435#true} is VALID [2022-02-20 18:12:32,567 INFO L290 TraceCheckUtils]: 9: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L272 TraceCheckUtils]: 10: Hoare triple {13435#true} call processEnvironment__wrappee__highWaterSensor(); {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 11: Hoare triple {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 12: Hoare triple {13435#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 13: Hoare triple {13435#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 14: Hoare triple {13435#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 15: Hoare triple {13435#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 16: Hoare triple {13435#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {13435#true} is VALID [2022-02-20 18:12:32,568 INFO L290 TraceCheckUtils]: 17: Hoare triple {13435#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {13435#true} is VALID [2022-02-20 18:12:32,569 INFO L290 TraceCheckUtils]: 18: Hoare triple {13435#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,569 INFO L290 TraceCheckUtils]: 19: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,569 INFO L290 TraceCheckUtils]: 20: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,570 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #258#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,570 INFO L290 TraceCheckUtils]: 22: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,570 INFO L290 TraceCheckUtils]: 23: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,570 INFO L290 TraceCheckUtils]: 24: Hoare triple {13503#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,571 INFO L290 TraceCheckUtils]: 25: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,571 INFO L290 TraceCheckUtils]: 26: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,571 INFO L290 TraceCheckUtils]: 27: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,572 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #272#return; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-02-20 18:12:32,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,584 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:32,584 INFO L290 TraceCheckUtils]: 1: Hoare triple {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:32,585 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} {13471#(not (= ~pumpRunning~0 0))} #252#return; {13475#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1| 0))} is VALID [2022-02-20 18:12:32,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-02-20 18:12:32,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:32,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,591 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,591 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {13435#true} {13435#true} #278#return; {13435#true} is VALID [2022-02-20 18:12:32,592 INFO L290 TraceCheckUtils]: 0: Hoare triple {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:32,592 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume !(0 == ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:32,592 INFO L272 TraceCheckUtils]: 2: Hoare triple {13435#true} call processEnvironment__wrappee__base(); {13435#true} is VALID [2022-02-20 18:12:32,592 INFO L290 TraceCheckUtils]: 3: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,592 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {13435#true} {13435#true} #278#return; {13435#true} is VALID [2022-02-20 18:12:32,592 INFO L290 TraceCheckUtils]: 5: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,593 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {13435#true} {13476#(not (= ~switchedOnBeforeTS~0 0))} #256#return; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-02-20 18:12:32,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,597 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:32,597 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,597 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13435#true} {13476#(not (= ~switchedOnBeforeTS~0 0))} #260#return; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,597 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {13435#true} is VALID [2022-02-20 18:12:32,598 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {13435#true} is VALID [2022-02-20 18:12:32,598 INFO L290 TraceCheckUtils]: 2: Hoare triple {13435#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {13435#true} is VALID [2022-02-20 18:12:32,598 INFO L290 TraceCheckUtils]: 3: Hoare triple {13435#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {13437#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:12:32,598 INFO L290 TraceCheckUtils]: 4: Hoare triple {13437#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {13438#(= |ULTIMATE.start_main_~tmp~3#1| 1)} is VALID [2022-02-20 18:12:32,598 INFO L290 TraceCheckUtils]: 5: Hoare triple {13438#(= |ULTIMATE.start_main_~tmp~3#1| 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L290 TraceCheckUtils]: 6: Hoare triple {13435#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L290 TraceCheckUtils]: 7: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L290 TraceCheckUtils]: 8: Hoare triple {13435#true} assume !false; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L290 TraceCheckUtils]: 9: Hoare triple {13435#true} assume test_~splverifierCounter~0#1 < 4; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L290 TraceCheckUtils]: 10: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L290 TraceCheckUtils]: 11: Hoare triple {13435#true} assume 0 != test_~tmp~5#1; {13435#true} is VALID [2022-02-20 18:12:32,599 INFO L272 TraceCheckUtils]: 12: Hoare triple {13435#true} call waterRise(); {13487#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 13: Hoare triple {13487#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 14: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {13435#true} {13435#true} #266#return; {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 16: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 17: Hoare triple {13435#true} assume !(0 != test_~tmp___0~1#1); {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 18: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 19: Hoare triple {13435#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {13435#true} is VALID [2022-02-20 18:12:32,600 INFO L290 TraceCheckUtils]: 20: Hoare triple {13435#true} assume { :end_inline_startSystem } true; {13435#true} is VALID [2022-02-20 18:12:32,601 INFO L272 TraceCheckUtils]: 21: Hoare triple {13435#true} call timeShift(); {13488#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:32,601 INFO L290 TraceCheckUtils]: 22: Hoare triple {13488#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:32,601 INFO L272 TraceCheckUtils]: 23: Hoare triple {13435#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:32,601 INFO L290 TraceCheckUtils]: 24: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:32,601 INFO L290 TraceCheckUtils]: 25: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,601 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {13435#true} {13435#true} #252#return; {13435#true} is VALID [2022-02-20 18:12:32,601 INFO L290 TraceCheckUtils]: 27: Hoare triple {13435#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:32,602 INFO L290 TraceCheckUtils]: 28: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13435#true} is VALID [2022-02-20 18:12:32,602 INFO L290 TraceCheckUtils]: 29: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:32,602 INFO L290 TraceCheckUtils]: 30: Hoare triple {13435#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13435#true} is VALID [2022-02-20 18:12:32,602 INFO L290 TraceCheckUtils]: 31: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:32,602 INFO L272 TraceCheckUtils]: 32: Hoare triple {13435#true} call processEnvironment__wrappee__highWaterSensor(); {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:32,602 INFO L290 TraceCheckUtils]: 33: Hoare triple {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:32,602 INFO L290 TraceCheckUtils]: 34: Hoare triple {13435#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:32,603 INFO L290 TraceCheckUtils]: 35: Hoare triple {13435#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:32,603 INFO L290 TraceCheckUtils]: 36: Hoare triple {13435#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {13435#true} is VALID [2022-02-20 18:12:32,603 INFO L290 TraceCheckUtils]: 37: Hoare triple {13435#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {13435#true} is VALID [2022-02-20 18:12:32,603 INFO L290 TraceCheckUtils]: 38: Hoare triple {13435#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {13435#true} is VALID [2022-02-20 18:12:32,603 INFO L290 TraceCheckUtils]: 39: Hoare triple {13435#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {13435#true} is VALID [2022-02-20 18:12:32,603 INFO L290 TraceCheckUtils]: 40: Hoare triple {13435#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,604 INFO L290 TraceCheckUtils]: 41: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,604 INFO L290 TraceCheckUtils]: 42: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,604 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #258#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,604 INFO L290 TraceCheckUtils]: 44: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,605 INFO L290 TraceCheckUtils]: 45: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,605 INFO L290 TraceCheckUtils]: 46: Hoare triple {13503#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,605 INFO L290 TraceCheckUtils]: 47: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,606 INFO L290 TraceCheckUtils]: 48: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,606 INFO L290 TraceCheckUtils]: 49: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:32,606 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #272#return; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,606 INFO L290 TraceCheckUtils]: 51: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume !false; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,607 INFO L290 TraceCheckUtils]: 52: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,607 INFO L290 TraceCheckUtils]: 53: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,607 INFO L290 TraceCheckUtils]: 54: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~5#1); {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,607 INFO L290 TraceCheckUtils]: 55: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,608 INFO L290 TraceCheckUtils]: 56: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~1#1); {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,608 INFO L290 TraceCheckUtils]: 57: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,608 INFO L290 TraceCheckUtils]: 58: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,609 INFO L290 TraceCheckUtils]: 59: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume { :end_inline_startSystem } true; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,609 INFO L272 TraceCheckUtils]: 60: Hoare triple {13471#(not (= ~pumpRunning~0 0))} call timeShift(); {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,609 INFO L290 TraceCheckUtils]: 61: Hoare triple {13471#(not (= ~pumpRunning~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13471#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:32,609 INFO L272 TraceCheckUtils]: 62: Hoare triple {13471#(not (= ~pumpRunning~0 0))} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:32,610 INFO L290 TraceCheckUtils]: 63: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:32,610 INFO L290 TraceCheckUtils]: 64: Hoare triple {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:32,610 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {13505#(= ~pumpRunning~0 |isPumpRunning_#res|)} {13471#(not (= ~pumpRunning~0 0))} #252#return; {13475#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1| 0))} is VALID [2022-02-20 18:12:32,611 INFO L290 TraceCheckUtils]: 66: Hoare triple {13475#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1| 0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,611 INFO L290 TraceCheckUtils]: 67: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,612 INFO L290 TraceCheckUtils]: 68: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,612 INFO L290 TraceCheckUtils]: 69: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,612 INFO L290 TraceCheckUtils]: 70: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_lowerWaterLevel } true; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,613 INFO L290 TraceCheckUtils]: 71: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,613 INFO L290 TraceCheckUtils]: 72: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,613 INFO L290 TraceCheckUtils]: 73: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,614 INFO L290 TraceCheckUtils]: 74: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,614 INFO L290 TraceCheckUtils]: 75: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,614 INFO L290 TraceCheckUtils]: 76: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,615 INFO L290 TraceCheckUtils]: 77: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume !(0 != processEnvironment_~tmp~7#1); {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,615 INFO L272 TraceCheckUtils]: 78: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} call processEnvironment__wrappee__highWaterSensor(); {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:32,615 INFO L290 TraceCheckUtils]: 79: Hoare triple {13504#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:32,615 INFO L290 TraceCheckUtils]: 80: Hoare triple {13435#true} assume !(0 == ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:32,615 INFO L272 TraceCheckUtils]: 81: Hoare triple {13435#true} call processEnvironment__wrappee__base(); {13435#true} is VALID [2022-02-20 18:12:32,615 INFO L290 TraceCheckUtils]: 82: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,616 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {13435#true} {13435#true} #278#return; {13435#true} is VALID [2022-02-20 18:12:32,616 INFO L290 TraceCheckUtils]: 84: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,616 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {13435#true} {13476#(not (= ~switchedOnBeforeTS~0 0))} #256#return; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,616 INFO L290 TraceCheckUtils]: 86: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_processEnvironment } true; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,617 INFO L290 TraceCheckUtils]: 87: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,617 INFO L290 TraceCheckUtils]: 88: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,617 INFO L290 TraceCheckUtils]: 89: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,617 INFO L272 TraceCheckUtils]: 90: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:32,617 INFO L290 TraceCheckUtils]: 91: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:32,617 INFO L290 TraceCheckUtils]: 92: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:32,618 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {13435#true} {13476#(not (= ~switchedOnBeforeTS~0 0))} #260#return; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,618 INFO L290 TraceCheckUtils]: 94: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,618 INFO L290 TraceCheckUtils]: 95: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {13476#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:32,619 INFO L290 TraceCheckUtils]: 96: Hoare triple {13476#(not (= ~switchedOnBeforeTS~0 0))} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {13436#false} is VALID [2022-02-20 18:12:32,619 INFO L290 TraceCheckUtils]: 97: Hoare triple {13436#false} assume !false; {13436#false} is VALID [2022-02-20 18:12:32,619 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:32,619 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:32,619 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1685985047] [2022-02-20 18:12:32,619 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1685985047] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:32,620 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [265184284] [2022-02-20 18:12:32,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:32,620 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:32,620 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:32,624 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:32,652 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:12:32,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,717 INFO L263 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:12:32,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:32,757 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:33,175 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {13435#true} is VALID [2022-02-20 18:12:33,175 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {13435#true} is VALID [2022-02-20 18:12:33,176 INFO L290 TraceCheckUtils]: 2: Hoare triple {13435#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {13435#true} is VALID [2022-02-20 18:12:33,176 INFO L290 TraceCheckUtils]: 3: Hoare triple {13435#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {13435#true} is VALID [2022-02-20 18:12:33,176 INFO L290 TraceCheckUtils]: 4: Hoare triple {13435#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {13435#true} is VALID [2022-02-20 18:12:33,176 INFO L290 TraceCheckUtils]: 5: Hoare triple {13435#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {13435#true} is VALID [2022-02-20 18:12:33,176 INFO L290 TraceCheckUtils]: 6: Hoare triple {13435#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {13435#true} is VALID [2022-02-20 18:12:33,177 INFO L290 TraceCheckUtils]: 7: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {13435#true} is VALID [2022-02-20 18:12:33,177 INFO L290 TraceCheckUtils]: 8: Hoare triple {13435#true} assume !false; {13435#true} is VALID [2022-02-20 18:12:33,177 INFO L290 TraceCheckUtils]: 9: Hoare triple {13435#true} assume test_~splverifierCounter~0#1 < 4; {13435#true} is VALID [2022-02-20 18:12:33,177 INFO L290 TraceCheckUtils]: 10: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {13435#true} is VALID [2022-02-20 18:12:33,177 INFO L290 TraceCheckUtils]: 11: Hoare triple {13435#true} assume 0 != test_~tmp~5#1; {13435#true} is VALID [2022-02-20 18:12:33,178 INFO L272 TraceCheckUtils]: 12: Hoare triple {13435#true} call waterRise(); {13435#true} is VALID [2022-02-20 18:12:33,178 INFO L290 TraceCheckUtils]: 13: Hoare triple {13435#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13435#true} is VALID [2022-02-20 18:12:33,178 INFO L290 TraceCheckUtils]: 14: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,178 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {13435#true} {13435#true} #266#return; {13435#true} is VALID [2022-02-20 18:12:33,178 INFO L290 TraceCheckUtils]: 16: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {13435#true} is VALID [2022-02-20 18:12:33,179 INFO L290 TraceCheckUtils]: 17: Hoare triple {13435#true} assume !(0 != test_~tmp___0~1#1); {13435#true} is VALID [2022-02-20 18:12:33,179 INFO L290 TraceCheckUtils]: 18: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {13435#true} is VALID [2022-02-20 18:12:33,179 INFO L290 TraceCheckUtils]: 19: Hoare triple {13435#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {13435#true} is VALID [2022-02-20 18:12:33,179 INFO L290 TraceCheckUtils]: 20: Hoare triple {13435#true} assume { :end_inline_startSystem } true; {13435#true} is VALID [2022-02-20 18:12:33,179 INFO L272 TraceCheckUtils]: 21: Hoare triple {13435#true} call timeShift(); {13435#true} is VALID [2022-02-20 18:12:33,180 INFO L290 TraceCheckUtils]: 22: Hoare triple {13435#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:33,180 INFO L272 TraceCheckUtils]: 23: Hoare triple {13435#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:33,180 INFO L290 TraceCheckUtils]: 24: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:33,180 INFO L290 TraceCheckUtils]: 25: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,180 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {13435#true} {13435#true} #252#return; {13435#true} is VALID [2022-02-20 18:12:33,181 INFO L290 TraceCheckUtils]: 27: Hoare triple {13435#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:33,181 INFO L290 TraceCheckUtils]: 28: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13435#true} is VALID [2022-02-20 18:12:33,181 INFO L290 TraceCheckUtils]: 29: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:33,181 INFO L290 TraceCheckUtils]: 30: Hoare triple {13435#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13435#true} is VALID [2022-02-20 18:12:33,181 INFO L290 TraceCheckUtils]: 31: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:33,181 INFO L272 TraceCheckUtils]: 32: Hoare triple {13435#true} call processEnvironment__wrappee__highWaterSensor(); {13435#true} is VALID [2022-02-20 18:12:33,182 INFO L290 TraceCheckUtils]: 33: Hoare triple {13435#true} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:33,182 INFO L290 TraceCheckUtils]: 34: Hoare triple {13435#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:33,182 INFO L290 TraceCheckUtils]: 35: Hoare triple {13435#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:33,182 INFO L290 TraceCheckUtils]: 36: Hoare triple {13435#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {13435#true} is VALID [2022-02-20 18:12:33,182 INFO L290 TraceCheckUtils]: 37: Hoare triple {13435#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {13435#true} is VALID [2022-02-20 18:12:33,183 INFO L290 TraceCheckUtils]: 38: Hoare triple {13435#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {13435#true} is VALID [2022-02-20 18:12:33,183 INFO L290 TraceCheckUtils]: 39: Hoare triple {13435#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {13435#true} is VALID [2022-02-20 18:12:33,184 INFO L290 TraceCheckUtils]: 40: Hoare triple {13435#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,184 INFO L290 TraceCheckUtils]: 41: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,184 INFO L290 TraceCheckUtils]: 42: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,185 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #258#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,185 INFO L290 TraceCheckUtils]: 44: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,186 INFO L290 TraceCheckUtils]: 45: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,186 INFO L290 TraceCheckUtils]: 46: Hoare triple {13503#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,186 INFO L290 TraceCheckUtils]: 47: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,187 INFO L290 TraceCheckUtils]: 48: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,187 INFO L290 TraceCheckUtils]: 49: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,188 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #272#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,188 INFO L290 TraceCheckUtils]: 51: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !false; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,188 INFO L290 TraceCheckUtils]: 52: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,189 INFO L290 TraceCheckUtils]: 53: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,189 INFO L290 TraceCheckUtils]: 54: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,189 INFO L290 TraceCheckUtils]: 55: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,190 INFO L290 TraceCheckUtils]: 56: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,190 INFO L290 TraceCheckUtils]: 57: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,191 INFO L290 TraceCheckUtils]: 58: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,191 INFO L290 TraceCheckUtils]: 59: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_startSystem } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,191 INFO L272 TraceCheckUtils]: 60: Hoare triple {13503#(<= 1 ~pumpRunning~0)} call timeShift(); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,192 INFO L290 TraceCheckUtils]: 61: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,192 INFO L272 TraceCheckUtils]: 62: Hoare triple {13503#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,193 INFO L290 TraceCheckUtils]: 63: Hoare triple {13503#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13700#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:33,193 INFO L290 TraceCheckUtils]: 64: Hoare triple {13700#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {13700#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:33,194 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {13700#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {13503#(<= 1 ~pumpRunning~0)} #252#return; {13707#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1|)} is VALID [2022-02-20 18:12:33,195 INFO L290 TraceCheckUtils]: 66: Hoare triple {13707#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,195 INFO L290 TraceCheckUtils]: 67: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,195 INFO L290 TraceCheckUtils]: 68: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,196 INFO L290 TraceCheckUtils]: 69: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,196 INFO L290 TraceCheckUtils]: 70: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,196 INFO L290 TraceCheckUtils]: 71: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,197 INFO L290 TraceCheckUtils]: 72: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,197 INFO L290 TraceCheckUtils]: 73: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,198 INFO L290 TraceCheckUtils]: 74: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,198 INFO L290 TraceCheckUtils]: 75: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,198 INFO L290 TraceCheckUtils]: 76: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,199 INFO L290 TraceCheckUtils]: 77: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~7#1); {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,199 INFO L272 TraceCheckUtils]: 78: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,199 INFO L290 TraceCheckUtils]: 79: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} havoc ~tmp~6#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,200 INFO L290 TraceCheckUtils]: 80: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,200 INFO L272 TraceCheckUtils]: 81: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,201 INFO L290 TraceCheckUtils]: 82: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,201 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {13711#(<= 1 ~switchedOnBeforeTS~0)} {13711#(<= 1 ~switchedOnBeforeTS~0)} #278#return; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,201 INFO L290 TraceCheckUtils]: 84: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,202 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {13711#(<= 1 ~switchedOnBeforeTS~0)} {13711#(<= 1 ~switchedOnBeforeTS~0)} #256#return; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,202 INFO L290 TraceCheckUtils]: 86: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,202 INFO L290 TraceCheckUtils]: 87: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,203 INFO L290 TraceCheckUtils]: 88: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,203 INFO L290 TraceCheckUtils]: 89: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,203 INFO L272 TraceCheckUtils]: 90: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,204 INFO L290 TraceCheckUtils]: 91: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,204 INFO L290 TraceCheckUtils]: 92: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,204 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {13711#(<= 1 ~switchedOnBeforeTS~0)} {13711#(<= 1 ~switchedOnBeforeTS~0)} #260#return; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,205 INFO L290 TraceCheckUtils]: 94: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,205 INFO L290 TraceCheckUtils]: 95: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,206 INFO L290 TraceCheckUtils]: 96: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {13436#false} is VALID [2022-02-20 18:12:33,206 INFO L290 TraceCheckUtils]: 97: Hoare triple {13436#false} assume !false; {13436#false} is VALID [2022-02-20 18:12:33,206 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:12:33,207 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:33,597 INFO L290 TraceCheckUtils]: 97: Hoare triple {13436#false} assume !false; {13436#false} is VALID [2022-02-20 18:12:33,598 INFO L290 TraceCheckUtils]: 96: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {13436#false} is VALID [2022-02-20 18:12:33,598 INFO L290 TraceCheckUtils]: 95: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,598 INFO L290 TraceCheckUtils]: 94: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,599 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {13435#true} {13711#(<= 1 ~switchedOnBeforeTS~0)} #260#return; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,599 INFO L290 TraceCheckUtils]: 92: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,599 INFO L290 TraceCheckUtils]: 91: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:33,599 INFO L272 TraceCheckUtils]: 90: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:33,599 INFO L290 TraceCheckUtils]: 89: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,600 INFO L290 TraceCheckUtils]: 88: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,600 INFO L290 TraceCheckUtils]: 87: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,600 INFO L290 TraceCheckUtils]: 86: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,601 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {13435#true} {13711#(<= 1 ~switchedOnBeforeTS~0)} #256#return; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,601 INFO L290 TraceCheckUtils]: 84: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,601 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {13435#true} {13435#true} #278#return; {13435#true} is VALID [2022-02-20 18:12:33,601 INFO L290 TraceCheckUtils]: 82: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,601 INFO L272 TraceCheckUtils]: 81: Hoare triple {13435#true} call processEnvironment__wrappee__base(); {13435#true} is VALID [2022-02-20 18:12:33,601 INFO L290 TraceCheckUtils]: 80: Hoare triple {13435#true} assume !(0 == ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:33,601 INFO L290 TraceCheckUtils]: 79: Hoare triple {13435#true} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:33,601 INFO L272 TraceCheckUtils]: 78: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {13435#true} is VALID [2022-02-20 18:12:33,602 INFO L290 TraceCheckUtils]: 77: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~7#1); {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,602 INFO L290 TraceCheckUtils]: 76: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,602 INFO L290 TraceCheckUtils]: 75: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,603 INFO L290 TraceCheckUtils]: 74: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,603 INFO L290 TraceCheckUtils]: 73: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,603 INFO L290 TraceCheckUtils]: 72: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,603 INFO L290 TraceCheckUtils]: 71: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,604 INFO L290 TraceCheckUtils]: 70: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,604 INFO L290 TraceCheckUtils]: 69: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,604 INFO L290 TraceCheckUtils]: 68: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,605 INFO L290 TraceCheckUtils]: 67: Hoare triple {13711#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,605 INFO L290 TraceCheckUtils]: 66: Hoare triple {13707#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13711#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:33,605 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {13904#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {13503#(<= 1 ~pumpRunning~0)} #252#return; {13707#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret28#1|)} is VALID [2022-02-20 18:12:33,606 INFO L290 TraceCheckUtils]: 64: Hoare triple {13904#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {13904#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:33,606 INFO L290 TraceCheckUtils]: 63: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13904#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:33,606 INFO L272 TraceCheckUtils]: 62: Hoare triple {13503#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:33,606 INFO L290 TraceCheckUtils]: 61: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,607 INFO L272 TraceCheckUtils]: 60: Hoare triple {13503#(<= 1 ~pumpRunning~0)} call timeShift(); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,607 INFO L290 TraceCheckUtils]: 59: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_startSystem } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,607 INFO L290 TraceCheckUtils]: 58: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,608 INFO L290 TraceCheckUtils]: 57: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,608 INFO L290 TraceCheckUtils]: 56: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,608 INFO L290 TraceCheckUtils]: 55: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,608 INFO L290 TraceCheckUtils]: 54: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,609 INFO L290 TraceCheckUtils]: 53: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,609 INFO L290 TraceCheckUtils]: 52: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,609 INFO L290 TraceCheckUtils]: 51: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !false; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,609 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #272#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,610 INFO L290 TraceCheckUtils]: 49: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,610 INFO L290 TraceCheckUtils]: 48: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,610 INFO L290 TraceCheckUtils]: 47: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,610 INFO L290 TraceCheckUtils]: 46: Hoare triple {13503#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,611 INFO L290 TraceCheckUtils]: 45: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,611 INFO L290 TraceCheckUtils]: 44: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,611 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {13503#(<= 1 ~pumpRunning~0)} {13435#true} #258#return; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,612 INFO L290 TraceCheckUtils]: 42: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,612 INFO L290 TraceCheckUtils]: 41: Hoare triple {13503#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,612 INFO L290 TraceCheckUtils]: 40: Hoare triple {13435#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {13503#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:33,612 INFO L290 TraceCheckUtils]: 39: Hoare triple {13435#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {13435#true} is VALID [2022-02-20 18:12:33,612 INFO L290 TraceCheckUtils]: 38: Hoare triple {13435#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {13435#true} is VALID [2022-02-20 18:12:33,612 INFO L290 TraceCheckUtils]: 37: Hoare triple {13435#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 36: Hoare triple {13435#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 35: Hoare triple {13435#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 34: Hoare triple {13435#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 33: Hoare triple {13435#true} havoc ~tmp~6#1; {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L272 TraceCheckUtils]: 32: Hoare triple {13435#true} call processEnvironment__wrappee__highWaterSensor(); {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 31: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 30: Hoare triple {13435#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {13435#true} is VALID [2022-02-20 18:12:33,613 INFO L290 TraceCheckUtils]: 29: Hoare triple {13435#true} assume !(0 != ~pumpRunning~0); {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L290 TraceCheckUtils]: 28: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L290 TraceCheckUtils]: 27: Hoare triple {13435#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {13435#true} {13435#true} #252#return; {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L290 TraceCheckUtils]: 25: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L290 TraceCheckUtils]: 24: Hoare triple {13435#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L272 TraceCheckUtils]: 23: Hoare triple {13435#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L290 TraceCheckUtils]: 22: Hoare triple {13435#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L272 TraceCheckUtils]: 21: Hoare triple {13435#true} call timeShift(); {13435#true} is VALID [2022-02-20 18:12:33,614 INFO L290 TraceCheckUtils]: 20: Hoare triple {13435#true} assume { :end_inline_startSystem } true; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 19: Hoare triple {13435#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 18: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 17: Hoare triple {13435#true} assume !(0 != test_~tmp___0~1#1); {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 16: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {13435#true} {13435#true} #266#return; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 14: Hoare triple {13435#true} assume true; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 13: Hoare triple {13435#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L272 TraceCheckUtils]: 12: Hoare triple {13435#true} call waterRise(); {13435#true} is VALID [2022-02-20 18:12:33,615 INFO L290 TraceCheckUtils]: 11: Hoare triple {13435#true} assume 0 != test_~tmp~5#1; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 10: Hoare triple {13435#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 9: Hoare triple {13435#true} assume test_~splverifierCounter~0#1 < 4; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 8: Hoare triple {13435#true} assume !false; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 7: Hoare triple {13435#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 6: Hoare triple {13435#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 5: Hoare triple {13435#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 4: Hoare triple {13435#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 3: Hoare triple {13435#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {13435#true} is VALID [2022-02-20 18:12:33,616 INFO L290 TraceCheckUtils]: 2: Hoare triple {13435#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {13435#true} is VALID [2022-02-20 18:12:33,617 INFO L290 TraceCheckUtils]: 1: Hoare triple {13435#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {13435#true} is VALID [2022-02-20 18:12:33,617 INFO L290 TraceCheckUtils]: 0: Hoare triple {13435#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {13435#true} is VALID [2022-02-20 18:12:33,617 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:33,617 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [265184284] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:33,617 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:33,618 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-02-20 18:12:33,618 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [198188594] [2022-02-20 18:12:33,618 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:33,619 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 98 [2022-02-20 18:12:33,621 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:33,621 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:12:33,710 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 159 edges. 159 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:33,710 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-02-20 18:12:33,710 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:33,711 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-02-20 18:12:33,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-02-20 18:12:33,711 INFO L87 Difference]: Start difference. First operand 747 states and 926 transitions. Second operand has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:12:37,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:37,299 INFO L93 Difference]: Finished difference Result 1713 states and 2190 transitions. [2022-02-20 18:12:37,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-02-20 18:12:37,299 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 98 [2022-02-20 18:12:37,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:37,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:12:37,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 492 transitions. [2022-02-20 18:12:37,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:12:37,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 492 transitions. [2022-02-20 18:12:37,309 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 41 states and 492 transitions. [2022-02-20 18:12:37,660 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 492 edges. 492 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:37,712 INFO L225 Difference]: With dead ends: 1713 [2022-02-20 18:12:37,712 INFO L226 Difference]: Without dead ends: 1058 [2022-02-20 18:12:37,722 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 221 SyntacticMatches, 1 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 668 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2022-02-20 18:12:37,723 INFO L933 BasicCegarLoop]: 243 mSDtfsCounter, 486 mSDsluCounter, 1273 mSDsCounter, 0 mSdLazyCounter, 1052 mSolverCounterSat, 226 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 487 SdHoareTripleChecker+Valid, 1516 SdHoareTripleChecker+Invalid, 1278 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 226 IncrementalHoareTripleChecker+Valid, 1052 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:37,723 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [487 Valid, 1516 Invalid, 1278 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [226 Valid, 1052 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-02-20 18:12:37,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1058 states. [2022-02-20 18:12:38,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1058 to 844. [2022-02-20 18:12:38,089 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:38,090 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1058 states. Second operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:38,091 INFO L74 IsIncluded]: Start isIncluded. First operand 1058 states. Second operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:38,092 INFO L87 Difference]: Start difference. First operand 1058 states. Second operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:38,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:38,130 INFO L93 Difference]: Finished difference Result 1058 states and 1313 transitions. [2022-02-20 18:12:38,130 INFO L276 IsEmpty]: Start isEmpty. Operand 1058 states and 1313 transitions. [2022-02-20 18:12:38,132 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:38,133 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:38,134 INFO L74 IsIncluded]: Start isIncluded. First operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) Second operand 1058 states. [2022-02-20 18:12:38,135 INFO L87 Difference]: Start difference. First operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) Second operand 1058 states. [2022-02-20 18:12:38,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:38,173 INFO L93 Difference]: Finished difference Result 1058 states and 1313 transitions. [2022-02-20 18:12:38,173 INFO L276 IsEmpty]: Start isEmpty. Operand 1058 states and 1313 transitions. [2022-02-20 18:12:38,176 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:38,176 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:38,176 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:38,176 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:38,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:38,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 844 states to 844 states and 1011 transitions. [2022-02-20 18:12:38,214 INFO L78 Accepts]: Start accepts. Automaton has 844 states and 1011 transitions. Word has length 98 [2022-02-20 18:12:38,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:38,214 INFO L470 AbstractCegarLoop]: Abstraction has 844 states and 1011 transitions. [2022-02-20 18:12:38,215 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:12:38,215 INFO L276 IsEmpty]: Start isEmpty. Operand 844 states and 1011 transitions. [2022-02-20 18:12:38,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 180 [2022-02-20 18:12:38,220 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:38,220 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:38,241 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:38,435 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:12:38,435 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:38,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:38,436 INFO L85 PathProgramCache]: Analyzing trace with hash 1322302797, now seen corresponding path program 1 times [2022-02-20 18:12:38,436 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:38,436 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739687481] [2022-02-20 18:12:38,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:38,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:38,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:38,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,497 INFO L290 TraceCheckUtils]: 0: Hoare triple {19976#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19862#true} is VALID [2022-02-20 18:12:38,497 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,497 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19862#true} #266#return; {19862#true} is VALID [2022-02-20 18:12:38,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:12:38,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:38,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,510 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,511 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,511 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:38,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,517 INFO L290 TraceCheckUtils]: 0: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,517 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,517 INFO L290 TraceCheckUtils]: 2: Hoare triple {19862#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,517 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 4: Hoare triple {19862#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 6: Hoare triple {19862#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 7: Hoare triple {19862#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 8: Hoare triple {19862#true} assume { :end_inline_activatePump } true; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 9: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19862#true} {19862#true} #258#return; {19862#true} is VALID [2022-02-20 18:12:38,518 INFO L290 TraceCheckUtils]: 0: Hoare triple {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L272 TraceCheckUtils]: 1: Hoare triple {19862#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L290 TraceCheckUtils]: 2: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L290 TraceCheckUtils]: 6: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L290 TraceCheckUtils]: 7: Hoare triple {19862#true} assume !(0 != ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,519 INFO L290 TraceCheckUtils]: 8: Hoare triple {19862#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19862#true} is VALID [2022-02-20 18:12:38,520 INFO L290 TraceCheckUtils]: 9: Hoare triple {19862#true} assume !(0 != ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,520 INFO L272 TraceCheckUtils]: 10: Hoare triple {19862#true} call processEnvironment__wrappee__highWaterSensor(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,520 INFO L290 TraceCheckUtils]: 11: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,520 INFO L290 TraceCheckUtils]: 12: Hoare triple {19862#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,520 INFO L290 TraceCheckUtils]: 13: Hoare triple {19862#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,520 INFO L290 TraceCheckUtils]: 14: Hoare triple {19862#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 15: Hoare triple {19862#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 16: Hoare triple {19862#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 17: Hoare triple {19862#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 18: Hoare triple {19862#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 19: Hoare triple {19862#true} assume { :end_inline_activatePump } true; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 20: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {19862#true} {19862#true} #258#return; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 22: Hoare triple {19862#true} assume { :end_inline_processEnvironment } true; {19862#true} is VALID [2022-02-20 18:12:38,521 INFO L290 TraceCheckUtils]: 23: Hoare triple {19862#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19862#true} is VALID [2022-02-20 18:12:38,522 INFO L290 TraceCheckUtils]: 24: Hoare triple {19862#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19862#true} is VALID [2022-02-20 18:12:38,522 INFO L290 TraceCheckUtils]: 25: Hoare triple {19862#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {19862#true} is VALID [2022-02-20 18:12:38,522 INFO L290 TraceCheckUtils]: 26: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19862#true} is VALID [2022-02-20 18:12:38,522 INFO L290 TraceCheckUtils]: 27: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,522 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {19862#true} {19862#true} #272#return; {19862#true} is VALID [2022-02-20 18:12:38,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:12:38,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:38,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,534 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,534 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,534 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:12:38,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:38,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,546 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,546 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {19862#true} {19862#true} #278#return; {19862#true} is VALID [2022-02-20 18:12:38,546 INFO L290 TraceCheckUtils]: 0: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,546 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume !(0 == ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L272 TraceCheckUtils]: 2: Hoare triple {19862#true} call processEnvironment__wrappee__base(); {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19862#true} {19862#true} #278#return; {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {19862#true} {19862#true} #256#return; {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L290 TraceCheckUtils]: 0: Hoare triple {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L272 TraceCheckUtils]: 1: Hoare triple {19862#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,547 INFO L290 TraceCheckUtils]: 2: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 6: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 7: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 8: Hoare triple {19862#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 9: Hoare triple {19862#true} assume { :end_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 10: Hoare triple {19862#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19862#true} is VALID [2022-02-20 18:12:38,548 INFO L290 TraceCheckUtils]: 11: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {19862#true} is VALID [2022-02-20 18:12:38,549 INFO L290 TraceCheckUtils]: 12: Hoare triple {19862#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {19862#true} is VALID [2022-02-20 18:12:38,549 INFO L290 TraceCheckUtils]: 13: Hoare triple {19862#true} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {19862#true} is VALID [2022-02-20 18:12:38,549 INFO L290 TraceCheckUtils]: 14: Hoare triple {19862#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {19862#true} is VALID [2022-02-20 18:12:38,549 INFO L290 TraceCheckUtils]: 15: Hoare triple {19862#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {19862#true} is VALID [2022-02-20 18:12:38,549 INFO L290 TraceCheckUtils]: 16: Hoare triple {19862#true} assume !(0 != processEnvironment_~tmp~7#1); {19862#true} is VALID [2022-02-20 18:12:38,549 INFO L272 TraceCheckUtils]: 17: Hoare triple {19862#true} call processEnvironment__wrappee__highWaterSensor(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,550 INFO L290 TraceCheckUtils]: 18: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L290 TraceCheckUtils]: 19: Hoare triple {19862#true} assume !(0 == ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L272 TraceCheckUtils]: 20: Hoare triple {19862#true} call processEnvironment__wrappee__base(); {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L290 TraceCheckUtils]: 21: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {19862#true} {19862#true} #278#return; {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L290 TraceCheckUtils]: 23: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {19862#true} {19862#true} #256#return; {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L290 TraceCheckUtils]: 25: Hoare triple {19862#true} assume { :end_inline_processEnvironment } true; {19862#true} is VALID [2022-02-20 18:12:38,550 INFO L290 TraceCheckUtils]: 26: Hoare triple {19862#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19862#true} is VALID [2022-02-20 18:12:38,551 INFO L290 TraceCheckUtils]: 27: Hoare triple {19862#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19862#true} is VALID [2022-02-20 18:12:38,551 INFO L290 TraceCheckUtils]: 28: Hoare triple {19862#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {19862#true} is VALID [2022-02-20 18:12:38,551 INFO L290 TraceCheckUtils]: 29: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19862#true} is VALID [2022-02-20 18:12:38,551 INFO L290 TraceCheckUtils]: 30: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,551 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {19862#true} {19862#true} #272#return; {19862#true} is VALID [2022-02-20 18:12:38,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-02-20 18:12:38,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:38,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,582 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,582 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,582 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:12:38,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,585 INFO L290 TraceCheckUtils]: 0: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {19862#true} is VALID [2022-02-20 18:12:38,585 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,585 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19863#false} #254#return; {19863#false} is VALID [2022-02-20 18:12:38,585 INFO L290 TraceCheckUtils]: 0: Hoare triple {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,585 INFO L272 TraceCheckUtils]: 1: Hoare triple {19862#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,585 INFO L290 TraceCheckUtils]: 2: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,585 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,585 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 6: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 7: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 8: Hoare triple {19862#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 9: Hoare triple {19862#true} assume { :end_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 10: Hoare triple {19862#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 11: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {19862#true} is VALID [2022-02-20 18:12:38,586 INFO L290 TraceCheckUtils]: 12: Hoare triple {19862#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {19862#true} is VALID [2022-02-20 18:12:38,587 INFO L290 TraceCheckUtils]: 13: Hoare triple {19862#true} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {20008#(= |timeShift_isLowWaterLevel_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:12:38,587 INFO L290 TraceCheckUtils]: 14: Hoare triple {20008#(= |timeShift_isLowWaterLevel_~tmp___0~3#1| 0)} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {20009#(= |timeShift_isLowWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:38,587 INFO L290 TraceCheckUtils]: 15: Hoare triple {20009#(= |timeShift_isLowWaterLevel_#res#1| 0)} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {20010#(= |timeShift_processEnvironment_~tmp~7#1| 0)} is VALID [2022-02-20 18:12:38,588 INFO L290 TraceCheckUtils]: 16: Hoare triple {20010#(= |timeShift_processEnvironment_~tmp~7#1| 0)} assume 0 != processEnvironment_~tmp~7#1; {19863#false} is VALID [2022-02-20 18:12:38,588 INFO L272 TraceCheckUtils]: 17: Hoare triple {19863#false} call deactivatePump(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,588 INFO L290 TraceCheckUtils]: 18: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {19862#true} is VALID [2022-02-20 18:12:38,588 INFO L290 TraceCheckUtils]: 19: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,588 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {19862#true} {19863#false} #254#return; {19863#false} is VALID [2022-02-20 18:12:38,588 INFO L290 TraceCheckUtils]: 21: Hoare triple {19863#false} assume { :end_inline_processEnvironment } true; {19863#false} is VALID [2022-02-20 18:12:38,588 INFO L290 TraceCheckUtils]: 22: Hoare triple {19863#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19863#false} is VALID [2022-02-20 18:12:38,588 INFO L290 TraceCheckUtils]: 23: Hoare triple {19863#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19863#false} is VALID [2022-02-20 18:12:38,589 INFO L290 TraceCheckUtils]: 24: Hoare triple {19863#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {19863#false} is VALID [2022-02-20 18:12:38,589 INFO L290 TraceCheckUtils]: 25: Hoare triple {19863#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19863#false} is VALID [2022-02-20 18:12:38,589 INFO L290 TraceCheckUtils]: 26: Hoare triple {19863#false} assume true; {19863#false} is VALID [2022-02-20 18:12:38,589 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {19863#false} {19862#true} #272#return; {19863#false} is VALID [2022-02-20 18:12:38,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-02-20 18:12:38,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,592 INFO L290 TraceCheckUtils]: 0: Hoare triple {19976#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {19862#true} is VALID [2022-02-20 18:12:38,592 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,592 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19863#false} #266#return; {19863#false} is VALID [2022-02-20 18:12:38,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-02-20 18:12:38,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,596 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,597 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,597 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19863#false} #252#return; {19863#false} is VALID [2022-02-20 18:12:38,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2022-02-20 18:12:38,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,602 INFO L290 TraceCheckUtils]: 0: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 2: Hoare triple {19862#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 4: Hoare triple {19862#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 6: Hoare triple {19862#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 7: Hoare triple {19862#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,603 INFO L290 TraceCheckUtils]: 8: Hoare triple {19862#true} assume { :end_inline_activatePump } true; {19862#true} is VALID [2022-02-20 18:12:38,604 INFO L290 TraceCheckUtils]: 9: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,604 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19862#true} {19863#false} #258#return; {19863#false} is VALID [2022-02-20 18:12:38,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2022-02-20 18:12:38,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:38,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,606 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,606 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19862#true} {19863#false} #260#return; {19863#false} is VALID [2022-02-20 18:12:38,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {19862#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,606 INFO L290 TraceCheckUtils]: 1: Hoare triple {19862#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 2: Hoare triple {19862#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 3: Hoare triple {19862#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 4: Hoare triple {19862#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 5: Hoare triple {19862#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 6: Hoare triple {19862#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 7: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 8: Hoare triple {19862#true} assume !false; {19862#true} is VALID [2022-02-20 18:12:38,607 INFO L290 TraceCheckUtils]: 9: Hoare triple {19862#true} assume test_~splverifierCounter~0#1 < 4; {19862#true} is VALID [2022-02-20 18:12:38,608 INFO L290 TraceCheckUtils]: 10: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {19862#true} is VALID [2022-02-20 18:12:38,608 INFO L290 TraceCheckUtils]: 11: Hoare triple {19862#true} assume 0 != test_~tmp~5#1; {19862#true} is VALID [2022-02-20 18:12:38,608 INFO L272 TraceCheckUtils]: 12: Hoare triple {19862#true} call waterRise(); {19976#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:38,608 INFO L290 TraceCheckUtils]: 13: Hoare triple {19976#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19862#true} is VALID [2022-02-20 18:12:38,608 INFO L290 TraceCheckUtils]: 14: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,608 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19862#true} {19862#true} #266#return; {19862#true} is VALID [2022-02-20 18:12:38,608 INFO L290 TraceCheckUtils]: 16: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {19862#true} is VALID [2022-02-20 18:12:38,609 INFO L290 TraceCheckUtils]: 17: Hoare triple {19862#true} assume !(0 != test_~tmp___0~1#1); {19862#true} is VALID [2022-02-20 18:12:38,609 INFO L290 TraceCheckUtils]: 18: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {19862#true} is VALID [2022-02-20 18:12:38,609 INFO L290 TraceCheckUtils]: 19: Hoare triple {19862#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,609 INFO L290 TraceCheckUtils]: 20: Hoare triple {19862#true} assume { :end_inline_startSystem } true; {19862#true} is VALID [2022-02-20 18:12:38,609 INFO L272 TraceCheckUtils]: 21: Hoare triple {19862#true} call timeShift(); {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:38,609 INFO L290 TraceCheckUtils]: 22: Hoare triple {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L272 TraceCheckUtils]: 23: Hoare triple {19862#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 24: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 25: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 27: Hoare triple {19862#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 28: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 29: Hoare triple {19862#true} assume !(0 != ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 30: Hoare triple {19862#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19862#true} is VALID [2022-02-20 18:12:38,610 INFO L290 TraceCheckUtils]: 31: Hoare triple {19862#true} assume !(0 != ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,611 INFO L272 TraceCheckUtils]: 32: Hoare triple {19862#true} call processEnvironment__wrappee__highWaterSensor(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,611 INFO L290 TraceCheckUtils]: 33: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,611 INFO L290 TraceCheckUtils]: 34: Hoare triple {19862#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,611 INFO L290 TraceCheckUtils]: 35: Hoare triple {19862#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,611 INFO L290 TraceCheckUtils]: 36: Hoare triple {19862#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {19862#true} is VALID [2022-02-20 18:12:38,611 INFO L290 TraceCheckUtils]: 37: Hoare triple {19862#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {19862#true} is VALID [2022-02-20 18:12:38,611 INFO L290 TraceCheckUtils]: 38: Hoare triple {19862#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 39: Hoare triple {19862#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 40: Hoare triple {19862#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 41: Hoare triple {19862#true} assume { :end_inline_activatePump } true; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 42: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {19862#true} {19862#true} #258#return; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 44: Hoare triple {19862#true} assume { :end_inline_processEnvironment } true; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 45: Hoare triple {19862#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 46: Hoare triple {19862#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19862#true} is VALID [2022-02-20 18:12:38,612 INFO L290 TraceCheckUtils]: 47: Hoare triple {19862#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 48: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 49: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {19862#true} {19862#true} #272#return; {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 51: Hoare triple {19862#true} assume !false; {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 52: Hoare triple {19862#true} assume test_~splverifierCounter~0#1 < 4; {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 53: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 54: Hoare triple {19862#true} assume !(0 != test_~tmp~5#1); {19862#true} is VALID [2022-02-20 18:12:38,613 INFO L290 TraceCheckUtils]: 55: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {19862#true} is VALID [2022-02-20 18:12:38,614 INFO L290 TraceCheckUtils]: 56: Hoare triple {19862#true} assume !(0 != test_~tmp___0~1#1); {19862#true} is VALID [2022-02-20 18:12:38,614 INFO L290 TraceCheckUtils]: 57: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {19862#true} is VALID [2022-02-20 18:12:38,614 INFO L290 TraceCheckUtils]: 58: Hoare triple {19862#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,614 INFO L290 TraceCheckUtils]: 59: Hoare triple {19862#true} assume { :end_inline_startSystem } true; {19862#true} is VALID [2022-02-20 18:12:38,614 INFO L272 TraceCheckUtils]: 60: Hoare triple {19862#true} call timeShift(); {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:38,614 INFO L290 TraceCheckUtils]: 61: Hoare triple {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L272 TraceCheckUtils]: 62: Hoare triple {19862#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 63: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 64: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 66: Hoare triple {19862#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 67: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 68: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 69: Hoare triple {19862#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19862#true} is VALID [2022-02-20 18:12:38,615 INFO L290 TraceCheckUtils]: 70: Hoare triple {19862#true} assume { :end_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 71: Hoare triple {19862#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 72: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 73: Hoare triple {19862#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 74: Hoare triple {19862#true} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 75: Hoare triple {19862#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 76: Hoare triple {19862#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {19862#true} is VALID [2022-02-20 18:12:38,616 INFO L290 TraceCheckUtils]: 77: Hoare triple {19862#true} assume !(0 != processEnvironment_~tmp~7#1); {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L272 TraceCheckUtils]: 78: Hoare triple {19862#true} call processEnvironment__wrappee__highWaterSensor(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,617 INFO L290 TraceCheckUtils]: 79: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L290 TraceCheckUtils]: 80: Hoare triple {19862#true} assume !(0 == ~pumpRunning~0); {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L272 TraceCheckUtils]: 81: Hoare triple {19862#true} call processEnvironment__wrappee__base(); {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L290 TraceCheckUtils]: 82: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {19862#true} {19862#true} #278#return; {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L290 TraceCheckUtils]: 84: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,617 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {19862#true} {19862#true} #256#return; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 86: Hoare triple {19862#true} assume { :end_inline_processEnvironment } true; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 87: Hoare triple {19862#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 88: Hoare triple {19862#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 89: Hoare triple {19862#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 90: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 91: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {19862#true} {19862#true} #272#return; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 93: Hoare triple {19862#true} assume !false; {19862#true} is VALID [2022-02-20 18:12:38,618 INFO L290 TraceCheckUtils]: 94: Hoare triple {19862#true} assume test_~splverifierCounter~0#1 < 4; {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 95: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 96: Hoare triple {19862#true} assume !(0 != test_~tmp~5#1); {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 97: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 98: Hoare triple {19862#true} assume !(0 != test_~tmp___0~1#1); {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 99: Hoare triple {19862#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 100: Hoare triple {19862#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,619 INFO L290 TraceCheckUtils]: 101: Hoare triple {19862#true} assume { :end_inline_startSystem } true; {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L272 TraceCheckUtils]: 102: Hoare triple {19862#true} call timeShift(); {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:38,620 INFO L290 TraceCheckUtils]: 103: Hoare triple {19977#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L272 TraceCheckUtils]: 104: Hoare triple {19862#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L290 TraceCheckUtils]: 105: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L290 TraceCheckUtils]: 106: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L284 TraceCheckUtils]: 107: Hoare quadruple {19862#true} {19862#true} #252#return; {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L290 TraceCheckUtils]: 108: Hoare triple {19862#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19862#true} is VALID [2022-02-20 18:12:38,620 INFO L290 TraceCheckUtils]: 109: Hoare triple {19862#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 110: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 111: Hoare triple {19862#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 112: Hoare triple {19862#true} assume { :end_inline_lowerWaterLevel } true; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 113: Hoare triple {19862#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 114: Hoare triple {19862#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 115: Hoare triple {19862#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {19862#true} is VALID [2022-02-20 18:12:38,621 INFO L290 TraceCheckUtils]: 116: Hoare triple {19862#true} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {20008#(= |timeShift_isLowWaterLevel_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:12:38,622 INFO L290 TraceCheckUtils]: 117: Hoare triple {20008#(= |timeShift_isLowWaterLevel_~tmp___0~3#1| 0)} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {20009#(= |timeShift_isLowWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:38,622 INFO L290 TraceCheckUtils]: 118: Hoare triple {20009#(= |timeShift_isLowWaterLevel_#res#1| 0)} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {20010#(= |timeShift_processEnvironment_~tmp~7#1| 0)} is VALID [2022-02-20 18:12:38,622 INFO L290 TraceCheckUtils]: 119: Hoare triple {20010#(= |timeShift_processEnvironment_~tmp~7#1| 0)} assume 0 != processEnvironment_~tmp~7#1; {19863#false} is VALID [2022-02-20 18:12:38,622 INFO L272 TraceCheckUtils]: 120: Hoare triple {19863#false} call deactivatePump(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 121: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {19862#true} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 122: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,623 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {19862#true} {19863#false} #254#return; {19863#false} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 124: Hoare triple {19863#false} assume { :end_inline_processEnvironment } true; {19863#false} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 125: Hoare triple {19863#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19863#false} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 126: Hoare triple {19863#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19863#false} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 127: Hoare triple {19863#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {19863#false} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 128: Hoare triple {19863#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19863#false} is VALID [2022-02-20 18:12:38,623 INFO L290 TraceCheckUtils]: 129: Hoare triple {19863#false} assume true; {19863#false} is VALID [2022-02-20 18:12:38,624 INFO L284 TraceCheckUtils]: 130: Hoare quadruple {19863#false} {19862#true} #272#return; {19863#false} is VALID [2022-02-20 18:12:38,624 INFO L290 TraceCheckUtils]: 131: Hoare triple {19863#false} assume !false; {19863#false} is VALID [2022-02-20 18:12:38,624 INFO L290 TraceCheckUtils]: 132: Hoare triple {19863#false} assume test_~splverifierCounter~0#1 < 4; {19863#false} is VALID [2022-02-20 18:12:38,624 INFO L290 TraceCheckUtils]: 133: Hoare triple {19863#false} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {19863#false} is VALID [2022-02-20 18:12:38,624 INFO L290 TraceCheckUtils]: 134: Hoare triple {19863#false} assume 0 != test_~tmp~5#1; {19863#false} is VALID [2022-02-20 18:12:38,624 INFO L272 TraceCheckUtils]: 135: Hoare triple {19863#false} call waterRise(); {19976#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:38,624 INFO L290 TraceCheckUtils]: 136: Hoare triple {19976#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {19862#true} is VALID [2022-02-20 18:12:38,624 INFO L290 TraceCheckUtils]: 137: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,624 INFO L284 TraceCheckUtils]: 138: Hoare quadruple {19862#true} {19863#false} #266#return; {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 139: Hoare triple {19863#false} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 140: Hoare triple {19863#false} assume !(0 != test_~tmp___0~1#1); {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 141: Hoare triple {19863#false} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 142: Hoare triple {19863#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 143: Hoare triple {19863#false} assume { :end_inline_startSystem } true; {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L272 TraceCheckUtils]: 144: Hoare triple {19863#false} call timeShift(); {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 145: Hoare triple {19863#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19863#false} is VALID [2022-02-20 18:12:38,625 INFO L272 TraceCheckUtils]: 146: Hoare triple {19863#false} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,625 INFO L290 TraceCheckUtils]: 147: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 148: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,626 INFO L284 TraceCheckUtils]: 149: Hoare quadruple {19862#true} {19863#false} #252#return; {19863#false} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 150: Hoare triple {19863#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {19863#false} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 151: Hoare triple {19863#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19863#false} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 152: Hoare triple {19863#false} assume !(0 != ~pumpRunning~0); {19863#false} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 153: Hoare triple {19863#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {19863#false} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 154: Hoare triple {19863#false} assume !(0 != ~pumpRunning~0); {19863#false} is VALID [2022-02-20 18:12:38,626 INFO L272 TraceCheckUtils]: 155: Hoare triple {19863#false} call processEnvironment__wrappee__highWaterSensor(); {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:38,626 INFO L290 TraceCheckUtils]: 156: Hoare triple {19992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 157: Hoare triple {19862#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 158: Hoare triple {19862#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 159: Hoare triple {19862#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 160: Hoare triple {19862#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 161: Hoare triple {19862#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 162: Hoare triple {19862#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 163: Hoare triple {19862#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 164: Hoare triple {19862#true} assume { :end_inline_activatePump } true; {19862#true} is VALID [2022-02-20 18:12:38,627 INFO L290 TraceCheckUtils]: 165: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,628 INFO L284 TraceCheckUtils]: 166: Hoare quadruple {19862#true} {19863#false} #258#return; {19863#false} is VALID [2022-02-20 18:12:38,628 INFO L290 TraceCheckUtils]: 167: Hoare triple {19863#false} assume { :end_inline_processEnvironment } true; {19863#false} is VALID [2022-02-20 18:12:38,638 INFO L290 TraceCheckUtils]: 168: Hoare triple {19863#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {19863#false} is VALID [2022-02-20 18:12:38,638 INFO L290 TraceCheckUtils]: 169: Hoare triple {19863#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {19863#false} is VALID [2022-02-20 18:12:38,638 INFO L290 TraceCheckUtils]: 170: Hoare triple {19863#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {19863#false} is VALID [2022-02-20 18:12:38,638 INFO L272 TraceCheckUtils]: 171: Hoare triple {19863#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {19862#true} is VALID [2022-02-20 18:12:38,638 INFO L290 TraceCheckUtils]: 172: Hoare triple {19862#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {19862#true} is VALID [2022-02-20 18:12:38,639 INFO L290 TraceCheckUtils]: 173: Hoare triple {19862#true} assume true; {19862#true} is VALID [2022-02-20 18:12:38,639 INFO L284 TraceCheckUtils]: 174: Hoare quadruple {19862#true} {19863#false} #260#return; {19863#false} is VALID [2022-02-20 18:12:38,639 INFO L290 TraceCheckUtils]: 175: Hoare triple {19863#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {19863#false} is VALID [2022-02-20 18:12:38,639 INFO L290 TraceCheckUtils]: 176: Hoare triple {19863#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {19863#false} is VALID [2022-02-20 18:12:38,639 INFO L290 TraceCheckUtils]: 177: Hoare triple {19863#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {19863#false} is VALID [2022-02-20 18:12:38,639 INFO L290 TraceCheckUtils]: 178: Hoare triple {19863#false} assume !false; {19863#false} is VALID [2022-02-20 18:12:38,639 INFO L134 CoverageAnalysis]: Checked inductivity of 196 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-02-20 18:12:38,639 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:38,639 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739687481] [2022-02-20 18:12:38,639 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739687481] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:38,640 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:38,640 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:12:38,640 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207625547] [2022-02-20 18:12:38,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:38,641 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 179 [2022-02-20 18:12:38,641 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:38,641 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:12:38,696 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 112 edges. 112 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:38,696 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:12:38,696 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:38,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:12:38,697 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:12:38,697 INFO L87 Difference]: Start difference. First operand 844 states and 1011 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:12:39,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:39,961 INFO L93 Difference]: Finished difference Result 1641 states and 1985 transitions. [2022-02-20 18:12:39,961 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-02-20 18:12:39,962 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 179 [2022-02-20 18:12:39,962 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:39,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:12:39,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 313 transitions. [2022-02-20 18:12:39,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:12:39,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 313 transitions. [2022-02-20 18:12:39,972 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 313 transitions. [2022-02-20 18:12:40,160 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 313 edges. 313 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:40,197 INFO L225 Difference]: With dead ends: 1641 [2022-02-20 18:12:40,197 INFO L226 Difference]: Without dead ends: 889 [2022-02-20 18:12:40,198 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=82, Invalid=190, Unknown=0, NotChecked=0, Total=272 [2022-02-20 18:12:40,199 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 198 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 202 SdHoareTripleChecker+Valid, 535 SdHoareTripleChecker+Invalid, 354 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:40,199 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [202 Valid, 535 Invalid, 354 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:12:40,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 889 states. [2022-02-20 18:12:40,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 889 to 853. [2022-02-20 18:12:40,544 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:40,546 INFO L82 GeneralOperation]: Start isEquivalent. First operand 889 states. Second operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:40,547 INFO L74 IsIncluded]: Start isIncluded. First operand 889 states. Second operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:40,548 INFO L87 Difference]: Start difference. First operand 889 states. Second operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:40,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:40,575 INFO L93 Difference]: Finished difference Result 889 states and 1071 transitions. [2022-02-20 18:12:40,575 INFO L276 IsEmpty]: Start isEmpty. Operand 889 states and 1071 transitions. [2022-02-20 18:12:40,577 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:40,577 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:40,578 INFO L74 IsIncluded]: Start isIncluded. First operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) Second operand 889 states. [2022-02-20 18:12:40,579 INFO L87 Difference]: Start difference. First operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) Second operand 889 states. [2022-02-20 18:12:40,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:40,609 INFO L93 Difference]: Finished difference Result 889 states and 1071 transitions. [2022-02-20 18:12:40,609 INFO L276 IsEmpty]: Start isEmpty. Operand 889 states and 1071 transitions. [2022-02-20 18:12:40,619 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:40,619 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:40,619 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:40,619 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:40,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2022-02-20 18:12:40,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 853 states to 853 states and 1020 transitions. [2022-02-20 18:12:40,660 INFO L78 Accepts]: Start accepts. Automaton has 853 states and 1020 transitions. Word has length 179 [2022-02-20 18:12:40,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:40,660 INFO L470 AbstractCegarLoop]: Abstraction has 853 states and 1020 transitions. [2022-02-20 18:12:40,661 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:12:40,661 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1020 transitions. [2022-02-20 18:12:40,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2022-02-20 18:12:40,663 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:40,664 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:40,664 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-02-20 18:12:40,664 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:40,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:40,664 INFO L85 PathProgramCache]: Analyzing trace with hash 866202355, now seen corresponding path program 1 times [2022-02-20 18:12:40,665 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:40,665 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106991134] [2022-02-20 18:12:40,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:40,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:40,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:40,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,749 INFO L290 TraceCheckUtils]: 0: Hoare triple {25412#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25298#true} is VALID [2022-02-20 18:12:40,749 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,749 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25298#true} #266#return; {25298#true} is VALID [2022-02-20 18:12:40,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:12:40,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:40,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,765 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,765 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,765 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:40,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,774 INFO L290 TraceCheckUtils]: 0: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,774 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,774 INFO L290 TraceCheckUtils]: 2: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,774 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:40,774 INFO L290 TraceCheckUtils]: 4: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,775 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:40,775 INFO L290 TraceCheckUtils]: 6: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:40,775 INFO L290 TraceCheckUtils]: 7: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,775 INFO L290 TraceCheckUtils]: 8: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:40,775 INFO L290 TraceCheckUtils]: 9: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,775 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25298#true} {25298#true} #258#return; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L290 TraceCheckUtils]: 0: Hoare triple {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L272 TraceCheckUtils]: 1: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L290 TraceCheckUtils]: 2: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L290 TraceCheckUtils]: 6: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:40,776 INFO L290 TraceCheckUtils]: 7: Hoare triple {25298#true} assume !(0 != ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,777 INFO L290 TraceCheckUtils]: 8: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,777 INFO L290 TraceCheckUtils]: 9: Hoare triple {25298#true} assume !(0 != ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,777 INFO L272 TraceCheckUtils]: 10: Hoare triple {25298#true} call processEnvironment__wrappee__highWaterSensor(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,777 INFO L290 TraceCheckUtils]: 11: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,777 INFO L290 TraceCheckUtils]: 12: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 13: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 14: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 15: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 16: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 17: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 18: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 19: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:40,778 INFO L290 TraceCheckUtils]: 20: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {25298#true} {25298#true} #258#return; {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L290 TraceCheckUtils]: 22: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L290 TraceCheckUtils]: 23: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L290 TraceCheckUtils]: 24: Hoare triple {25298#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L290 TraceCheckUtils]: 25: Hoare triple {25298#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L290 TraceCheckUtils]: 26: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25298#true} is VALID [2022-02-20 18:12:40,779 INFO L290 TraceCheckUtils]: 27: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,780 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {25298#true} {25298#true} #272#return; {25298#true} is VALID [2022-02-20 18:12:40,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:12:40,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:40,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,791 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,791 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,791 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:12:40,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:40,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,798 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,798 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {25298#true} {25298#true} #278#return; {25298#true} is VALID [2022-02-20 18:12:40,798 INFO L290 TraceCheckUtils]: 0: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,798 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume !(0 == ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L272 TraceCheckUtils]: 2: Hoare triple {25298#true} call processEnvironment__wrappee__base(); {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25298#true} {25298#true} #278#return; {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {25298#true} {25298#true} #256#return; {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L290 TraceCheckUtils]: 0: Hoare triple {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L272 TraceCheckUtils]: 1: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,799 INFO L290 TraceCheckUtils]: 2: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L290 TraceCheckUtils]: 6: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L290 TraceCheckUtils]: 7: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L290 TraceCheckUtils]: 8: Hoare triple {25298#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25298#true} is VALID [2022-02-20 18:12:40,800 INFO L290 TraceCheckUtils]: 9: Hoare triple {25298#true} assume { :end_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 10: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 11: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 12: Hoare triple {25298#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 13: Hoare triple {25298#true} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 14: Hoare triple {25298#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 15: Hoare triple {25298#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25298#true} is VALID [2022-02-20 18:12:40,801 INFO L290 TraceCheckUtils]: 16: Hoare triple {25298#true} assume !(0 != processEnvironment_~tmp~7#1); {25298#true} is VALID [2022-02-20 18:12:40,802 INFO L272 TraceCheckUtils]: 17: Hoare triple {25298#true} call processEnvironment__wrappee__highWaterSensor(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,802 INFO L290 TraceCheckUtils]: 18: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,802 INFO L290 TraceCheckUtils]: 19: Hoare triple {25298#true} assume !(0 == ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,802 INFO L272 TraceCheckUtils]: 20: Hoare triple {25298#true} call processEnvironment__wrappee__base(); {25298#true} is VALID [2022-02-20 18:12:40,802 INFO L290 TraceCheckUtils]: 21: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {25298#true} {25298#true} #278#return; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L290 TraceCheckUtils]: 23: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {25298#true} {25298#true} #256#return; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L290 TraceCheckUtils]: 25: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L290 TraceCheckUtils]: 26: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L290 TraceCheckUtils]: 27: Hoare triple {25298#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L290 TraceCheckUtils]: 28: Hoare triple {25298#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25298#true} is VALID [2022-02-20 18:12:40,803 INFO L290 TraceCheckUtils]: 29: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25298#true} is VALID [2022-02-20 18:12:40,804 INFO L290 TraceCheckUtils]: 30: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,804 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {25298#true} {25298#true} #272#return; {25298#true} is VALID [2022-02-20 18:12:40,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-02-20 18:12:40,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:40,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,857 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,857 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,857 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:12:40,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,860 INFO L290 TraceCheckUtils]: 0: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {25298#true} is VALID [2022-02-20 18:12:40,860 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,860 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25298#true} #254#return; {25298#true} is VALID [2022-02-20 18:12:40,860 INFO L290 TraceCheckUtils]: 0: Hoare triple {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,860 INFO L272 TraceCheckUtils]: 1: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,860 INFO L290 TraceCheckUtils]: 2: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,860 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 6: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 7: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 8: Hoare triple {25298#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 9: Hoare triple {25298#true} assume { :end_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 10: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 11: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25298#true} is VALID [2022-02-20 18:12:40,861 INFO L290 TraceCheckUtils]: 12: Hoare triple {25298#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25298#true} is VALID [2022-02-20 18:12:40,862 INFO L290 TraceCheckUtils]: 13: Hoare triple {25298#true} assume !(0 != isLowWaterLevel_~tmp~9#1);isLowWaterLevel_~tmp___0~3#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,862 INFO L290 TraceCheckUtils]: 14: Hoare triple {25298#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25298#true} is VALID [2022-02-20 18:12:40,862 INFO L290 TraceCheckUtils]: 15: Hoare triple {25298#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25298#true} is VALID [2022-02-20 18:12:40,862 INFO L290 TraceCheckUtils]: 16: Hoare triple {25298#true} assume 0 != processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,862 INFO L272 TraceCheckUtils]: 17: Hoare triple {25298#true} call deactivatePump(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,862 INFO L290 TraceCheckUtils]: 18: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {25298#true} is VALID [2022-02-20 18:12:40,862 INFO L290 TraceCheckUtils]: 19: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,863 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {25298#true} {25298#true} #254#return; {25298#true} is VALID [2022-02-20 18:12:40,863 INFO L290 TraceCheckUtils]: 21: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:40,863 INFO L290 TraceCheckUtils]: 22: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25447#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:40,863 INFO L290 TraceCheckUtils]: 23: Hoare triple {25447#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25448#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:40,864 INFO L290 TraceCheckUtils]: 24: Hoare triple {25448#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,864 INFO L290 TraceCheckUtils]: 25: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,864 INFO L290 TraceCheckUtils]: 26: Hoare triple {25392#(= 2 ~waterLevel~0)} assume true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,865 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {25392#(= 2 ~waterLevel~0)} {25298#true} #272#return; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2022-02-20 18:12:40,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,867 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,867 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,868 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25392#(= 2 ~waterLevel~0)} #252#return; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2022-02-20 18:12:40,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 2: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 4: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 6: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 7: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,873 INFO L290 TraceCheckUtils]: 8: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:40,874 INFO L290 TraceCheckUtils]: 9: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,874 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25298#true} {25392#(= 2 ~waterLevel~0)} #258#return; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-02-20 18:12:40,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:40,876 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25298#true} {25299#false} #260#return; {25299#false} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {25298#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 2: Hoare triple {25298#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 3: Hoare triple {25298#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 4: Hoare triple {25298#true} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 5: Hoare triple {25298#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {25298#true} is VALID [2022-02-20 18:12:40,877 INFO L290 TraceCheckUtils]: 6: Hoare triple {25298#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {25298#true} is VALID [2022-02-20 18:12:40,878 INFO L290 TraceCheckUtils]: 7: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {25298#true} is VALID [2022-02-20 18:12:40,878 INFO L290 TraceCheckUtils]: 8: Hoare triple {25298#true} assume !false; {25298#true} is VALID [2022-02-20 18:12:40,878 INFO L290 TraceCheckUtils]: 9: Hoare triple {25298#true} assume test_~splverifierCounter~0#1 < 4; {25298#true} is VALID [2022-02-20 18:12:40,878 INFO L290 TraceCheckUtils]: 10: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25298#true} is VALID [2022-02-20 18:12:40,878 INFO L290 TraceCheckUtils]: 11: Hoare triple {25298#true} assume 0 != test_~tmp~5#1; {25298#true} is VALID [2022-02-20 18:12:40,878 INFO L272 TraceCheckUtils]: 12: Hoare triple {25298#true} call waterRise(); {25412#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:40,878 INFO L290 TraceCheckUtils]: 13: Hoare triple {25412#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L290 TraceCheckUtils]: 14: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25298#true} {25298#true} #266#return; {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L290 TraceCheckUtils]: 16: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L290 TraceCheckUtils]: 17: Hoare triple {25298#true} assume !(0 != test_~tmp___0~1#1); {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L290 TraceCheckUtils]: 18: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L290 TraceCheckUtils]: 19: Hoare triple {25298#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,879 INFO L290 TraceCheckUtils]: 20: Hoare triple {25298#true} assume { :end_inline_startSystem } true; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L272 TraceCheckUtils]: 21: Hoare triple {25298#true} call timeShift(); {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:40,880 INFO L290 TraceCheckUtils]: 22: Hoare triple {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L272 TraceCheckUtils]: 23: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L290 TraceCheckUtils]: 24: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L290 TraceCheckUtils]: 25: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L290 TraceCheckUtils]: 27: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L290 TraceCheckUtils]: 28: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:40,880 INFO L290 TraceCheckUtils]: 29: Hoare triple {25298#true} assume !(0 != ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,881 INFO L290 TraceCheckUtils]: 30: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,881 INFO L290 TraceCheckUtils]: 31: Hoare triple {25298#true} assume !(0 != ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,881 INFO L272 TraceCheckUtils]: 32: Hoare triple {25298#true} call processEnvironment__wrappee__highWaterSensor(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,881 INFO L290 TraceCheckUtils]: 33: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,881 INFO L290 TraceCheckUtils]: 34: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,881 INFO L290 TraceCheckUtils]: 35: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,881 INFO L290 TraceCheckUtils]: 36: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 37: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 38: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 39: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 40: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 41: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 42: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {25298#true} {25298#true} #258#return; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 44: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 45: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25298#true} is VALID [2022-02-20 18:12:40,882 INFO L290 TraceCheckUtils]: 46: Hoare triple {25298#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 47: Hoare triple {25298#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 48: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 49: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {25298#true} {25298#true} #272#return; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 51: Hoare triple {25298#true} assume !false; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 52: Hoare triple {25298#true} assume test_~splverifierCounter~0#1 < 4; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 53: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 54: Hoare triple {25298#true} assume !(0 != test_~tmp~5#1); {25298#true} is VALID [2022-02-20 18:12:40,883 INFO L290 TraceCheckUtils]: 55: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25298#true} is VALID [2022-02-20 18:12:40,884 INFO L290 TraceCheckUtils]: 56: Hoare triple {25298#true} assume !(0 != test_~tmp___0~1#1); {25298#true} is VALID [2022-02-20 18:12:40,884 INFO L290 TraceCheckUtils]: 57: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25298#true} is VALID [2022-02-20 18:12:40,884 INFO L290 TraceCheckUtils]: 58: Hoare triple {25298#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,884 INFO L290 TraceCheckUtils]: 59: Hoare triple {25298#true} assume { :end_inline_startSystem } true; {25298#true} is VALID [2022-02-20 18:12:40,884 INFO L272 TraceCheckUtils]: 60: Hoare triple {25298#true} call timeShift(); {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:40,885 INFO L290 TraceCheckUtils]: 61: Hoare triple {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L272 TraceCheckUtils]: 62: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L290 TraceCheckUtils]: 63: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L290 TraceCheckUtils]: 64: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L290 TraceCheckUtils]: 66: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L290 TraceCheckUtils]: 67: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:40,885 INFO L290 TraceCheckUtils]: 68: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,895 INFO L290 TraceCheckUtils]: 69: Hoare triple {25298#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 70: Hoare triple {25298#true} assume { :end_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 71: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 72: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 73: Hoare triple {25298#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 74: Hoare triple {25298#true} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 75: Hoare triple {25298#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 76: Hoare triple {25298#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25298#true} is VALID [2022-02-20 18:12:40,896 INFO L290 TraceCheckUtils]: 77: Hoare triple {25298#true} assume !(0 != processEnvironment_~tmp~7#1); {25298#true} is VALID [2022-02-20 18:12:40,897 INFO L272 TraceCheckUtils]: 78: Hoare triple {25298#true} call processEnvironment__wrappee__highWaterSensor(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,897 INFO L290 TraceCheckUtils]: 79: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,897 INFO L290 TraceCheckUtils]: 80: Hoare triple {25298#true} assume !(0 == ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:40,897 INFO L272 TraceCheckUtils]: 81: Hoare triple {25298#true} call processEnvironment__wrappee__base(); {25298#true} is VALID [2022-02-20 18:12:40,897 INFO L290 TraceCheckUtils]: 82: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,897 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {25298#true} {25298#true} #278#return; {25298#true} is VALID [2022-02-20 18:12:40,897 INFO L290 TraceCheckUtils]: 84: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {25298#true} {25298#true} #256#return; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 86: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 87: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 88: Hoare triple {25298#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 89: Hoare triple {25298#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 90: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 91: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {25298#true} {25298#true} #272#return; {25298#true} is VALID [2022-02-20 18:12:40,898 INFO L290 TraceCheckUtils]: 93: Hoare triple {25298#true} assume !false; {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 94: Hoare triple {25298#true} assume test_~splverifierCounter~0#1 < 4; {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 95: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 96: Hoare triple {25298#true} assume !(0 != test_~tmp~5#1); {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 97: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 98: Hoare triple {25298#true} assume !(0 != test_~tmp___0~1#1); {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 99: Hoare triple {25298#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 100: Hoare triple {25298#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,899 INFO L290 TraceCheckUtils]: 101: Hoare triple {25298#true} assume { :end_inline_startSystem } true; {25298#true} is VALID [2022-02-20 18:12:40,900 INFO L272 TraceCheckUtils]: 102: Hoare triple {25298#true} call timeShift(); {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:40,900 INFO L290 TraceCheckUtils]: 103: Hoare triple {25413#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,900 INFO L272 TraceCheckUtils]: 104: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,900 INFO L290 TraceCheckUtils]: 105: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,900 INFO L290 TraceCheckUtils]: 106: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,900 INFO L284 TraceCheckUtils]: 107: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:40,900 INFO L290 TraceCheckUtils]: 108: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 109: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 110: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 111: Hoare triple {25298#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 112: Hoare triple {25298#true} assume { :end_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 113: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 114: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 115: Hoare triple {25298#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 116: Hoare triple {25298#true} assume !(0 != isLowWaterLevel_~tmp~9#1);isLowWaterLevel_~tmp___0~3#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,901 INFO L290 TraceCheckUtils]: 117: Hoare triple {25298#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25298#true} is VALID [2022-02-20 18:12:40,902 INFO L290 TraceCheckUtils]: 118: Hoare triple {25298#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25298#true} is VALID [2022-02-20 18:12:40,902 INFO L290 TraceCheckUtils]: 119: Hoare triple {25298#true} assume 0 != processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:40,902 INFO L272 TraceCheckUtils]: 120: Hoare triple {25298#true} call deactivatePump(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,902 INFO L290 TraceCheckUtils]: 121: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {25298#true} is VALID [2022-02-20 18:12:40,902 INFO L290 TraceCheckUtils]: 122: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,902 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {25298#true} {25298#true} #254#return; {25298#true} is VALID [2022-02-20 18:12:40,902 INFO L290 TraceCheckUtils]: 124: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:40,903 INFO L290 TraceCheckUtils]: 125: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25447#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:40,903 INFO L290 TraceCheckUtils]: 126: Hoare triple {25447#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25448#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:40,904 INFO L290 TraceCheckUtils]: 127: Hoare triple {25448#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,904 INFO L290 TraceCheckUtils]: 128: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,904 INFO L290 TraceCheckUtils]: 129: Hoare triple {25392#(= 2 ~waterLevel~0)} assume true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,904 INFO L284 TraceCheckUtils]: 130: Hoare quadruple {25392#(= 2 ~waterLevel~0)} {25298#true} #272#return; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,905 INFO L290 TraceCheckUtils]: 131: Hoare triple {25392#(= 2 ~waterLevel~0)} assume !false; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,905 INFO L290 TraceCheckUtils]: 132: Hoare triple {25392#(= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,905 INFO L290 TraceCheckUtils]: 133: Hoare triple {25392#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,905 INFO L290 TraceCheckUtils]: 134: Hoare triple {25392#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp~5#1); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,906 INFO L290 TraceCheckUtils]: 135: Hoare triple {25392#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,906 INFO L290 TraceCheckUtils]: 136: Hoare triple {25392#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1#1); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,906 INFO L290 TraceCheckUtils]: 137: Hoare triple {25392#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,907 INFO L290 TraceCheckUtils]: 138: Hoare triple {25392#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,907 INFO L290 TraceCheckUtils]: 139: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :end_inline_startSystem } true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,907 INFO L272 TraceCheckUtils]: 140: Hoare triple {25392#(= 2 ~waterLevel~0)} call timeShift(); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,907 INFO L290 TraceCheckUtils]: 141: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,908 INFO L272 TraceCheckUtils]: 142: Hoare triple {25392#(= 2 ~waterLevel~0)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,908 INFO L290 TraceCheckUtils]: 143: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,908 INFO L290 TraceCheckUtils]: 144: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,908 INFO L284 TraceCheckUtils]: 145: Hoare quadruple {25298#true} {25392#(= 2 ~waterLevel~0)} #252#return; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,908 INFO L290 TraceCheckUtils]: 146: Hoare triple {25392#(= 2 ~waterLevel~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,909 INFO L290 TraceCheckUtils]: 147: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,909 INFO L290 TraceCheckUtils]: 148: Hoare triple {25392#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,909 INFO L290 TraceCheckUtils]: 149: Hoare triple {25392#(= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,909 INFO L290 TraceCheckUtils]: 150: Hoare triple {25392#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,910 INFO L272 TraceCheckUtils]: 151: Hoare triple {25392#(= 2 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:40,910 INFO L290 TraceCheckUtils]: 152: Hoare triple {25428#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:40,910 INFO L290 TraceCheckUtils]: 153: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,910 INFO L290 TraceCheckUtils]: 154: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:40,910 INFO L290 TraceCheckUtils]: 155: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:40,910 INFO L290 TraceCheckUtils]: 156: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:40,911 INFO L290 TraceCheckUtils]: 157: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:40,911 INFO L290 TraceCheckUtils]: 158: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:40,911 INFO L290 TraceCheckUtils]: 159: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:40,911 INFO L290 TraceCheckUtils]: 160: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:40,911 INFO L290 TraceCheckUtils]: 161: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,911 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {25298#true} {25392#(= 2 ~waterLevel~0)} #258#return; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,912 INFO L290 TraceCheckUtils]: 163: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {25392#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:40,912 INFO L290 TraceCheckUtils]: 164: Hoare triple {25392#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25407#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:40,912 INFO L290 TraceCheckUtils]: 165: Hoare triple {25407#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25408#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 166: Hoare triple {25408#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {25299#false} is VALID [2022-02-20 18:12:40,913 INFO L272 TraceCheckUtils]: 167: Hoare triple {25299#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 168: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 169: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:40,913 INFO L284 TraceCheckUtils]: 170: Hoare quadruple {25298#true} {25299#false} #260#return; {25299#false} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 171: Hoare triple {25299#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {25299#false} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 172: Hoare triple {25299#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {25299#false} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 173: Hoare triple {25299#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {25299#false} is VALID [2022-02-20 18:12:40,913 INFO L290 TraceCheckUtils]: 174: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:40,914 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-02-20 18:12:40,914 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:40,914 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106991134] [2022-02-20 18:12:40,914 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106991134] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:40,914 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1681544842] [2022-02-20 18:12:40,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:40,915 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:40,915 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:40,916 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:40,917 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:12:41,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:41,028 INFO L263 TraceCheckSpWp]: Trace formula consists of 684 conjuncts, 13 conjunts are in the unsatisfiable core [2022-02-20 18:12:41,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:41,067 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:41,685 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,686 INFO L290 TraceCheckUtils]: 1: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,686 INFO L290 TraceCheckUtils]: 2: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,686 INFO L290 TraceCheckUtils]: 3: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,686 INFO L290 TraceCheckUtils]: 4: Hoare triple {25452#(<= ~waterLevel~0 1)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,687 INFO L290 TraceCheckUtils]: 5: Hoare triple {25452#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,687 INFO L290 TraceCheckUtils]: 6: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,687 INFO L290 TraceCheckUtils]: 7: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,690 INFO L290 TraceCheckUtils]: 8: Hoare triple {25452#(<= ~waterLevel~0 1)} assume !false; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,692 INFO L290 TraceCheckUtils]: 9: Hoare triple {25452#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,692 INFO L290 TraceCheckUtils]: 10: Hoare triple {25452#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,692 INFO L290 TraceCheckUtils]: 11: Hoare triple {25452#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:41,693 INFO L272 TraceCheckUtils]: 12: Hoare triple {25452#(<= ~waterLevel~0 1)} call waterRise(); {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,693 INFO L290 TraceCheckUtils]: 13: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25493#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:41,694 INFO L290 TraceCheckUtils]: 14: Hoare triple {25493#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} assume true; {25493#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:41,694 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25493#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} {25452#(<= ~waterLevel~0 1)} #266#return; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,695 INFO L290 TraceCheckUtils]: 16: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,696 INFO L290 TraceCheckUtils]: 17: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,696 INFO L290 TraceCheckUtils]: 18: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,696 INFO L290 TraceCheckUtils]: 19: Hoare triple {25500#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,696 INFO L290 TraceCheckUtils]: 20: Hoare triple {25500#(<= ~waterLevel~0 2)} assume { :end_inline_startSystem } true; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,697 INFO L272 TraceCheckUtils]: 21: Hoare triple {25500#(<= ~waterLevel~0 2)} call timeShift(); {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,697 INFO L290 TraceCheckUtils]: 22: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,697 INFO L272 TraceCheckUtils]: 23: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:41,697 INFO L290 TraceCheckUtils]: 24: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:41,697 INFO L290 TraceCheckUtils]: 25: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:41,697 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {25298#true} {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #252#return; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,698 INFO L290 TraceCheckUtils]: 27: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,698 INFO L290 TraceCheckUtils]: 28: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,698 INFO L290 TraceCheckUtils]: 29: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,698 INFO L290 TraceCheckUtils]: 30: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 31: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,699 INFO L272 TraceCheckUtils]: 32: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 33: Hoare triple {25298#true} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 34: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 35: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 36: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 37: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 38: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 39: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 40: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 41: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:41,699 INFO L290 TraceCheckUtils]: 42: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:41,700 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {25298#true} {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #258#return; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,700 INFO L290 TraceCheckUtils]: 44: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,700 INFO L290 TraceCheckUtils]: 45: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,700 INFO L290 TraceCheckUtils]: 46: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,701 INFO L290 TraceCheckUtils]: 47: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,701 INFO L290 TraceCheckUtils]: 48: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,705 INFO L290 TraceCheckUtils]: 49: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume true; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,705 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} {25500#(<= ~waterLevel~0 2)} #272#return; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,706 INFO L290 TraceCheckUtils]: 51: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !false; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,706 INFO L290 TraceCheckUtils]: 52: Hoare triple {25500#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,706 INFO L290 TraceCheckUtils]: 53: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,706 INFO L290 TraceCheckUtils]: 54: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5#1); {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,707 INFO L290 TraceCheckUtils]: 55: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,707 INFO L290 TraceCheckUtils]: 56: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,707 INFO L290 TraceCheckUtils]: 57: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,707 INFO L290 TraceCheckUtils]: 58: Hoare triple {25500#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,708 INFO L290 TraceCheckUtils]: 59: Hoare triple {25500#(<= ~waterLevel~0 2)} assume { :end_inline_startSystem } true; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:41,708 INFO L272 TraceCheckUtils]: 60: Hoare triple {25500#(<= ~waterLevel~0 2)} call timeShift(); {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,708 INFO L290 TraceCheckUtils]: 61: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,708 INFO L272 TraceCheckUtils]: 62: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:41,708 INFO L290 TraceCheckUtils]: 63: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:41,708 INFO L290 TraceCheckUtils]: 64: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:41,709 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {25298#true} {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #252#return; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,709 INFO L290 TraceCheckUtils]: 66: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,709 INFO L290 TraceCheckUtils]: 67: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,710 INFO L290 TraceCheckUtils]: 68: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,712 INFO L290 TraceCheckUtils]: 69: Hoare triple {25489#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,712 INFO L290 TraceCheckUtils]: 70: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_lowerWaterLevel } true; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,712 INFO L290 TraceCheckUtils]: 71: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,712 INFO L290 TraceCheckUtils]: 72: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,713 INFO L290 TraceCheckUtils]: 73: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,713 INFO L290 TraceCheckUtils]: 74: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,713 INFO L290 TraceCheckUtils]: 75: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,713 INFO L290 TraceCheckUtils]: 76: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,714 INFO L290 TraceCheckUtils]: 77: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume !(0 != processEnvironment_~tmp~7#1); {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,714 INFO L272 TraceCheckUtils]: 78: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L290 TraceCheckUtils]: 79: Hoare triple {25298#true} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L290 TraceCheckUtils]: 80: Hoare triple {25298#true} assume !(0 == ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L272 TraceCheckUtils]: 81: Hoare triple {25298#true} call processEnvironment__wrappee__base(); {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L290 TraceCheckUtils]: 82: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {25298#true} {25298#true} #278#return; {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L290 TraceCheckUtils]: 84: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:41,714 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {25298#true} {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} #256#return; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,715 INFO L290 TraceCheckUtils]: 86: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:41,715 INFO L290 TraceCheckUtils]: 87: Hoare triple {25663#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25718#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:41,716 INFO L290 TraceCheckUtils]: 88: Hoare triple {25718#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25722#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| ~waterLevel~0))} is VALID [2022-02-20 18:12:41,716 INFO L290 TraceCheckUtils]: 89: Hoare triple {25722#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| ~waterLevel~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25726#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:41,716 INFO L290 TraceCheckUtils]: 90: Hoare triple {25726#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25726#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:41,716 INFO L290 TraceCheckUtils]: 91: Hoare triple {25726#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume true; {25726#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:41,717 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {25726#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} {25500#(<= ~waterLevel~0 2)} #272#return; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 93: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 94: Hoare triple {25299#false} assume test_~splverifierCounter~0#1 < 4; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 95: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 96: Hoare triple {25299#false} assume !(0 != test_~tmp~5#1); {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 97: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 98: Hoare triple {25299#false} assume !(0 != test_~tmp___0~1#1); {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 99: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 100: Hoare triple {25299#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L290 TraceCheckUtils]: 101: Hoare triple {25299#false} assume { :end_inline_startSystem } true; {25299#false} is VALID [2022-02-20 18:12:41,717 INFO L272 TraceCheckUtils]: 102: Hoare triple {25299#false} call timeShift(); {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 103: Hoare triple {25299#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L272 TraceCheckUtils]: 104: Hoare triple {25299#false} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 105: Hoare triple {25299#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 106: Hoare triple {25299#false} assume true; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L284 TraceCheckUtils]: 107: Hoare quadruple {25299#false} {25299#false} #252#return; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 108: Hoare triple {25299#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 109: Hoare triple {25299#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 110: Hoare triple {25299#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 111: Hoare triple {25299#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 112: Hoare triple {25299#false} assume { :end_inline_lowerWaterLevel } true; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 113: Hoare triple {25299#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 114: Hoare triple {25299#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 115: Hoare triple {25299#false} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 116: Hoare triple {25299#false} assume !(0 != isLowWaterLevel_~tmp~9#1);isLowWaterLevel_~tmp___0~3#1 := 1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 117: Hoare triple {25299#false} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 118: Hoare triple {25299#false} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 119: Hoare triple {25299#false} assume 0 != processEnvironment_~tmp~7#1; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L272 TraceCheckUtils]: 120: Hoare triple {25299#false} call deactivatePump(); {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 121: Hoare triple {25299#false} ~pumpRunning~0 := 0; {25299#false} is VALID [2022-02-20 18:12:41,718 INFO L290 TraceCheckUtils]: 122: Hoare triple {25299#false} assume true; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {25299#false} {25299#false} #254#return; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 124: Hoare triple {25299#false} assume { :end_inline_processEnvironment } true; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 125: Hoare triple {25299#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 126: Hoare triple {25299#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 127: Hoare triple {25299#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 128: Hoare triple {25299#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 129: Hoare triple {25299#false} assume true; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L284 TraceCheckUtils]: 130: Hoare quadruple {25299#false} {25299#false} #272#return; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 131: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 132: Hoare triple {25299#false} assume test_~splverifierCounter~0#1 < 4; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 133: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 134: Hoare triple {25299#false} assume !(0 != test_~tmp~5#1); {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 135: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 136: Hoare triple {25299#false} assume !(0 != test_~tmp___0~1#1); {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 137: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 138: Hoare triple {25299#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 139: Hoare triple {25299#false} assume { :end_inline_startSystem } true; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L272 TraceCheckUtils]: 140: Hoare triple {25299#false} call timeShift(); {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 141: Hoare triple {25299#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L272 TraceCheckUtils]: 142: Hoare triple {25299#false} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25299#false} is VALID [2022-02-20 18:12:41,719 INFO L290 TraceCheckUtils]: 143: Hoare triple {25299#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 144: Hoare triple {25299#false} assume true; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L284 TraceCheckUtils]: 145: Hoare quadruple {25299#false} {25299#false} #252#return; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 146: Hoare triple {25299#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 147: Hoare triple {25299#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 148: Hoare triple {25299#false} assume !(0 != ~pumpRunning~0); {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 149: Hoare triple {25299#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 150: Hoare triple {25299#false} assume !(0 != ~pumpRunning~0); {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L272 TraceCheckUtils]: 151: Hoare triple {25299#false} call processEnvironment__wrappee__highWaterSensor(); {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 152: Hoare triple {25299#false} havoc ~tmp~6#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 153: Hoare triple {25299#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 154: Hoare triple {25299#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 155: Hoare triple {25299#false} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 156: Hoare triple {25299#false} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 157: Hoare triple {25299#false} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 158: Hoare triple {25299#false} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 159: Hoare triple {25299#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 160: Hoare triple {25299#false} assume { :end_inline_activatePump } true; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 161: Hoare triple {25299#false} assume true; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {25299#false} {25299#false} #258#return; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 163: Hoare triple {25299#false} assume { :end_inline_processEnvironment } true; {25299#false} is VALID [2022-02-20 18:12:41,720 INFO L290 TraceCheckUtils]: 164: Hoare triple {25299#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 165: Hoare triple {25299#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 166: Hoare triple {25299#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L272 TraceCheckUtils]: 167: Hoare triple {25299#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 168: Hoare triple {25299#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 169: Hoare triple {25299#false} assume true; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L284 TraceCheckUtils]: 170: Hoare quadruple {25299#false} {25299#false} #260#return; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 171: Hoare triple {25299#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 172: Hoare triple {25299#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 173: Hoare triple {25299#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L290 TraceCheckUtils]: 174: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:41,721 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 140 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:12:41,722 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:42,897 INFO L290 TraceCheckUtils]: 174: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:42,897 INFO L290 TraceCheckUtils]: 173: Hoare triple {25299#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {25299#false} is VALID [2022-02-20 18:12:42,897 INFO L290 TraceCheckUtils]: 172: Hoare triple {25299#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {25299#false} is VALID [2022-02-20 18:12:42,897 INFO L290 TraceCheckUtils]: 171: Hoare triple {25299#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret30#1 && __utac_acc__Specification5_spec__3_#t~ret30#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret30#1;havoc __utac_acc__Specification5_spec__3_#t~ret30#1; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L284 TraceCheckUtils]: 170: Hoare quadruple {25298#true} {25299#false} #260#return; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 169: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 168: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L272 TraceCheckUtils]: 167: Hoare triple {25299#false} call __utac_acc__Specification5_spec__3_#t~ret30#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 166: Hoare triple {25299#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 165: Hoare triple {25299#false} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 164: Hoare triple {25299#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 163: Hoare triple {25299#false} assume { :end_inline_processEnvironment } true; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {25298#true} {25299#false} #258#return; {25299#false} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 161: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 160: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 159: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 158: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 157: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 156: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 155: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 154: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 153: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:42,898 INFO L290 TraceCheckUtils]: 152: Hoare triple {25298#true} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:42,899 INFO L272 TraceCheckUtils]: 151: Hoare triple {25299#false} call processEnvironment__wrappee__highWaterSensor(); {25298#true} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 150: Hoare triple {25299#false} assume !(0 != ~pumpRunning~0); {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 149: Hoare triple {25299#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 148: Hoare triple {25299#false} assume !(0 != ~pumpRunning~0); {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 147: Hoare triple {25299#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 146: Hoare triple {25299#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L284 TraceCheckUtils]: 145: Hoare quadruple {25298#true} {25299#false} #252#return; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 144: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 143: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:42,899 INFO L272 TraceCheckUtils]: 142: Hoare triple {25299#false} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 141: Hoare triple {25299#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L272 TraceCheckUtils]: 140: Hoare triple {25299#false} call timeShift(); {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 139: Hoare triple {25299#false} assume { :end_inline_startSystem } true; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 138: Hoare triple {25299#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 137: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 136: Hoare triple {25299#false} assume !(0 != test_~tmp___0~1#1); {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 135: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25299#false} is VALID [2022-02-20 18:12:42,899 INFO L290 TraceCheckUtils]: 134: Hoare triple {25299#false} assume !(0 != test_~tmp~5#1); {25299#false} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 133: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25299#false} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 132: Hoare triple {25299#false} assume test_~splverifierCounter~0#1 < 4; {25299#false} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 131: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:42,900 INFO L284 TraceCheckUtils]: 130: Hoare quadruple {25298#true} {25299#false} #272#return; {25299#false} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 129: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 128: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 127: Hoare triple {25298#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 126: Hoare triple {25298#true} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 125: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 124: Hoare triple {25298#true} assume { :end_inline_processEnvironment } true; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {25298#true} {25298#true} #254#return; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 122: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 121: Hoare triple {25298#true} ~pumpRunning~0 := 0; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L272 TraceCheckUtils]: 120: Hoare triple {25298#true} call deactivatePump(); {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 119: Hoare triple {25298#true} assume 0 != processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 118: Hoare triple {25298#true} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 117: Hoare triple {25298#true} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {25298#true} is VALID [2022-02-20 18:12:42,900 INFO L290 TraceCheckUtils]: 116: Hoare triple {25298#true} assume !(0 != isLowWaterLevel_~tmp~9#1);isLowWaterLevel_~tmp___0~3#1 := 1; {25298#true} is VALID [2022-02-20 18:12:42,903 INFO L290 TraceCheckUtils]: 115: Hoare triple {25298#true} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {25298#true} is VALID [2022-02-20 18:12:42,903 INFO L290 TraceCheckUtils]: 114: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {25298#true} is VALID [2022-02-20 18:12:42,903 INFO L290 TraceCheckUtils]: 113: Hoare triple {25298#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {25298#true} is VALID [2022-02-20 18:12:42,903 INFO L290 TraceCheckUtils]: 112: Hoare triple {25298#true} assume { :end_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 111: Hoare triple {25298#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 110: Hoare triple {25298#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 109: Hoare triple {25298#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 108: Hoare triple {25298#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L284 TraceCheckUtils]: 107: Hoare quadruple {25298#true} {25298#true} #252#return; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 106: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 105: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L272 TraceCheckUtils]: 104: Hoare triple {25298#true} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:42,904 INFO L290 TraceCheckUtils]: 103: Hoare triple {25298#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {25298#true} is VALID [2022-02-20 18:12:42,905 INFO L272 TraceCheckUtils]: 102: Hoare triple {25299#false} call timeShift(); {25298#true} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 101: Hoare triple {25299#false} assume { :end_inline_startSystem } true; {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 100: Hoare triple {25299#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 99: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 98: Hoare triple {25299#false} assume !(0 != test_~tmp___0~1#1); {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 97: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 96: Hoare triple {25299#false} assume !(0 != test_~tmp~5#1); {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 95: Hoare triple {25299#false} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 94: Hoare triple {25299#false} assume test_~splverifierCounter~0#1 < 4; {25299#false} is VALID [2022-02-20 18:12:42,905 INFO L290 TraceCheckUtils]: 93: Hoare triple {25299#false} assume !false; {25299#false} is VALID [2022-02-20 18:12:42,911 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {26231#(< 2 |old(~waterLevel~0)|)} {25500#(<= ~waterLevel~0 2)} #272#return; {25299#false} is VALID [2022-02-20 18:12:42,912 INFO L290 TraceCheckUtils]: 91: Hoare triple {26231#(< 2 |old(~waterLevel~0)|)} assume true; {26231#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:42,912 INFO L290 TraceCheckUtils]: 90: Hoare triple {26231#(< 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {26231#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:42,912 INFO L290 TraceCheckUtils]: 89: Hoare triple {26241#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|)) (< 2 |old(~waterLevel~0)|))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {26231#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:42,913 INFO L290 TraceCheckUtils]: 88: Hoare triple {26245#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {26241#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|)) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,913 INFO L290 TraceCheckUtils]: 87: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {26245#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,913 INFO L290 TraceCheckUtils]: 86: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_processEnvironment } true; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,913 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {25298#true} {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} #256#return; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,914 INFO L290 TraceCheckUtils]: 84: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,914 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {25298#true} {25298#true} #278#return; {25298#true} is VALID [2022-02-20 18:12:42,914 INFO L290 TraceCheckUtils]: 82: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,914 INFO L272 TraceCheckUtils]: 81: Hoare triple {25298#true} call processEnvironment__wrappee__base(); {25298#true} is VALID [2022-02-20 18:12:42,914 INFO L290 TraceCheckUtils]: 80: Hoare triple {25298#true} assume !(0 == ~pumpRunning~0); {25298#true} is VALID [2022-02-20 18:12:42,914 INFO L290 TraceCheckUtils]: 79: Hoare triple {25298#true} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:42,914 INFO L272 TraceCheckUtils]: 78: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} call processEnvironment__wrappee__highWaterSensor(); {25298#true} is VALID [2022-02-20 18:12:42,915 INFO L290 TraceCheckUtils]: 77: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume !(0 != processEnvironment_~tmp~7#1); {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,915 INFO L290 TraceCheckUtils]: 76: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} processEnvironment_#t~ret41#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,915 INFO L290 TraceCheckUtils]: 75: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} isLowWaterLevel_~retValue_acc~11#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~11#1; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,915 INFO L290 TraceCheckUtils]: 74: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != isLowWaterLevel_~tmp~9#1;isLowWaterLevel_~tmp___0~3#1 := 0; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,916 INFO L290 TraceCheckUtils]: 73: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} isLowWaterLevel_#t~ret52#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret52#1 && isLowWaterLevel_#t~ret52#1 <= 2147483647;isLowWaterLevel_~tmp~9#1 := isLowWaterLevel_#t~ret52#1;havoc isLowWaterLevel_#t~ret52#1; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,916 INFO L290 TraceCheckUtils]: 72: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret52#1, isLowWaterLevel_~retValue_acc~11#1, isLowWaterLevel_~tmp~9#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~11#1;havoc isLowWaterLevel_~tmp~9#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;havoc isLowWaterSensorDry_~retValue_acc~7#1;isLowWaterSensorDry_~retValue_acc~7#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~7#1; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,916 INFO L290 TraceCheckUtils]: 71: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,916 INFO L290 TraceCheckUtils]: 70: Hoare triple {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_lowerWaterLevel } true; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,917 INFO L290 TraceCheckUtils]: 69: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26249#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:42,917 INFO L290 TraceCheckUtils]: 68: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,918 INFO L290 TraceCheckUtils]: 67: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,918 INFO L290 TraceCheckUtils]: 66: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,918 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {25298#true} {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #252#return; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,918 INFO L290 TraceCheckUtils]: 64: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,919 INFO L290 TraceCheckUtils]: 63: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:42,919 INFO L272 TraceCheckUtils]: 62: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:42,919 INFO L290 TraceCheckUtils]: 61: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,919 INFO L272 TraceCheckUtils]: 60: Hoare triple {25500#(<= ~waterLevel~0 2)} call timeShift(); {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,920 INFO L290 TraceCheckUtils]: 59: Hoare triple {25500#(<= ~waterLevel~0 2)} assume { :end_inline_startSystem } true; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,920 INFO L290 TraceCheckUtils]: 58: Hoare triple {25500#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,920 INFO L290 TraceCheckUtils]: 57: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,920 INFO L290 TraceCheckUtils]: 56: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,921 INFO L290 TraceCheckUtils]: 55: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,921 INFO L290 TraceCheckUtils]: 54: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5#1); {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,921 INFO L290 TraceCheckUtils]: 53: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,921 INFO L290 TraceCheckUtils]: 52: Hoare triple {25500#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,922 INFO L290 TraceCheckUtils]: 51: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !false; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,922 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} {25500#(<= ~waterLevel~0 2)} #272#return; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,922 INFO L290 TraceCheckUtils]: 49: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume true; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,923 INFO L290 TraceCheckUtils]: 48: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,923 INFO L290 TraceCheckUtils]: 47: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,923 INFO L290 TraceCheckUtils]: 46: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} __utac_acc__Specification5_spec__3_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret29#1 && __utac_acc__Specification5_spec__3_#t~ret29#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret29#1;havoc __utac_acc__Specification5_spec__3_#t~ret29#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,924 INFO L290 TraceCheckUtils]: 45: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret29#1, __utac_acc__Specification5_spec__3_#t~ret30#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~5#1;havoc getWaterLevel_~retValue_acc~5#1;getWaterLevel_~retValue_acc~5#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~5#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,924 INFO L290 TraceCheckUtils]: 44: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline_processEnvironment } true; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,924 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {25298#true} {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #258#return; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 42: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 41: Hoare triple {25298#true} assume { :end_inline_activatePump } true; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 40: Hoare triple {25298#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 39: Hoare triple {25298#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 38: Hoare triple {25298#true} isHighWaterLevel_~retValue_acc~10#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~10#1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 37: Hoare triple {25298#true} assume !(0 != isHighWaterLevel_~tmp~8#1);isHighWaterLevel_~tmp___0~2#1 := 1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 36: Hoare triple {25298#true} isHighWaterLevel_#t~ret51#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret51#1 && isHighWaterLevel_#t~ret51#1 <= 2147483647;isHighWaterLevel_~tmp~8#1 := isHighWaterLevel_#t~ret51#1;havoc isHighWaterLevel_#t~ret51#1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 35: Hoare triple {25298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 34: Hoare triple {25298#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret51#1, isHighWaterLevel_~retValue_acc~10#1, isHighWaterLevel_~tmp~8#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~10#1;havoc isHighWaterLevel_~tmp~8#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~6#1;havoc isHighWaterSensorDry_~retValue_acc~6#1; {25298#true} is VALID [2022-02-20 18:12:42,925 INFO L290 TraceCheckUtils]: 33: Hoare triple {25298#true} havoc ~tmp~6#1; {25298#true} is VALID [2022-02-20 18:12:42,926 INFO L272 TraceCheckUtils]: 32: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call processEnvironment__wrappee__highWaterSensor(); {25298#true} is VALID [2022-02-20 18:12:42,926 INFO L290 TraceCheckUtils]: 31: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,926 INFO L290 TraceCheckUtils]: 30: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,927 INFO L290 TraceCheckUtils]: 29: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,927 INFO L290 TraceCheckUtils]: 28: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,927 INFO L290 TraceCheckUtils]: 27: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret28#1 && __utac_acc__Specification5_spec__2_#t~ret28#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret28#1;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,928 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {25298#true} {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #252#return; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,928 INFO L290 TraceCheckUtils]: 25: Hoare triple {25298#true} assume true; {25298#true} is VALID [2022-02-20 18:12:42,928 INFO L290 TraceCheckUtils]: 24: Hoare triple {25298#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~pumpRunning~0;#res := ~retValue_acc~9; {25298#true} is VALID [2022-02-20 18:12:42,928 INFO L272 TraceCheckUtils]: 23: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret28#1 := isPumpRunning(); {25298#true} is VALID [2022-02-20 18:12:42,928 INFO L290 TraceCheckUtils]: 22: Hoare triple {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret28#1; {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,929 INFO L272 TraceCheckUtils]: 21: Hoare triple {25500#(<= ~waterLevel~0 2)} call timeShift(); {26304#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:42,929 INFO L290 TraceCheckUtils]: 20: Hoare triple {25500#(<= ~waterLevel~0 2)} assume { :end_inline_startSystem } true; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,929 INFO L290 TraceCheckUtils]: 19: Hoare triple {25500#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,930 INFO L290 TraceCheckUtils]: 18: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,930 INFO L290 TraceCheckUtils]: 17: Hoare triple {25500#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,930 INFO L290 TraceCheckUtils]: 16: Hoare triple {25500#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,931 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {26467#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} {25452#(<= ~waterLevel~0 1)} #266#return; {25500#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:42,931 INFO L290 TraceCheckUtils]: 14: Hoare triple {26467#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} assume true; {26467#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:42,932 INFO L290 TraceCheckUtils]: 13: Hoare triple {26474#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26467#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:42,932 INFO L272 TraceCheckUtils]: 12: Hoare triple {25452#(<= ~waterLevel~0 1)} call waterRise(); {26474#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:42,932 INFO L290 TraceCheckUtils]: 11: Hoare triple {25452#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,932 INFO L290 TraceCheckUtils]: 10: Hoare triple {25452#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,933 INFO L290 TraceCheckUtils]: 9: Hoare triple {25452#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,933 INFO L290 TraceCheckUtils]: 8: Hoare triple {25452#(<= ~waterLevel~0 1)} assume !false; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,933 INFO L290 TraceCheckUtils]: 7: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,933 INFO L290 TraceCheckUtils]: 6: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,934 INFO L290 TraceCheckUtils]: 5: Hoare triple {25452#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,934 INFO L290 TraceCheckUtils]: 4: Hoare triple {25452#(<= ~waterLevel~0 1)} main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret27#1 && main_#t~ret27#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret27#1;havoc main_#t~ret27#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,934 INFO L290 TraceCheckUtils]: 3: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,935 INFO L290 TraceCheckUtils]: 2: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,935 INFO L290 TraceCheckUtils]: 1: Hoare triple {25452#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~3#1, main_~tmp~3#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,936 INFO L290 TraceCheckUtils]: 0: Hoare triple {25298#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {25452#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:42,937 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 81 proven. 41 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-02-20 18:12:42,937 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1681544842] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:42,937 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:42,937 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 25 [2022-02-20 18:12:42,938 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778848088] [2022-02-20 18:12:42,938 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:42,939 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) Word has length 175 [2022-02-20 18:12:42,942 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:42,943 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2022-02-20 18:12:43,090 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 277 edges. 277 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:43,091 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-02-20 18:12:43,091 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:43,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-02-20 18:12:43,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=482, Unknown=0, NotChecked=0, Total=600 [2022-02-20 18:12:43,092 INFO L87 Difference]: Start difference. First operand 853 states and 1020 transitions. Second operand has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2022-02-20 18:12:47,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,311 INFO L93 Difference]: Finished difference Result 1866 states and 2300 transitions. [2022-02-20 18:12:47,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-02-20 18:12:47,311 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) Word has length 175 [2022-02-20 18:12:47,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:47,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2022-02-20 18:12:47,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 412 transitions. [2022-02-20 18:12:47,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2022-02-20 18:12:47,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 412 transitions. [2022-02-20 18:12:47,320 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 31 states and 412 transitions. [2022-02-20 18:12:47,612 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 412 edges. 412 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:47,613 INFO L225 Difference]: With dead ends: 1866 [2022-02-20 18:12:47,613 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:12:47,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 422 GetRequests, 370 SyntacticMatches, 3 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 503 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=545, Invalid=2005, Unknown=0, NotChecked=0, Total=2550 [2022-02-20 18:12:47,616 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 1032 mSDsluCounter, 1139 mSDsCounter, 0 mSdLazyCounter, 1512 mSolverCounterSat, 351 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1038 SdHoareTripleChecker+Valid, 1289 SdHoareTripleChecker+Invalid, 1863 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 351 IncrementalHoareTripleChecker+Valid, 1512 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:47,616 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1038 Valid, 1289 Invalid, 1863 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [351 Valid, 1512 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-02-20 18:12:47,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:12:47,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:12:47,616 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:47,617 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:47,617 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:47,617 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:47,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,617 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:47,617 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:47,617 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,617 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:47,617 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:47,617 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:47,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,618 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:47,618 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:47,618 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,618 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:47,618 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:47,618 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:47,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:47,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:12:47,618 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 175 [2022-02-20 18:12:47,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:47,619 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:12:47,619 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.64) internal successors, (216), 21 states have internal predecessors, (216), 9 states have call successors, (30), 9 states have call predecessors, (30), 9 states have return successors, (31), 8 states have call predecessors, (31), 9 states have call successors, (31) [2022-02-20 18:12:47,620 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:47,620 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,622 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:12:47,645 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:47,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-02-20 18:12:47,837 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:12:56,179 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 860 867) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:56,179 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 860 867) no Hoare annotation was computed. [2022-02-20 18:12:56,179 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 860 867) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 793 799) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 793 799) the Hoare annotation is: true [2022-02-20 18:12:56,180 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 613 624) the Hoare annotation is: true [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point L617-1(lines 613 624) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 613 624) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point L952(lines 952 956) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point L952-2(lines 952 956) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point L564(lines 564 574) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point L593(lines 593 597) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L858 garLoopResultBuilder]: For program point L560(lines 560 577) no Hoare annotation was computed. [2022-02-20 18:12:56,180 INFO L854 garLoopResultBuilder]: At program point L593-2(lines 589 600) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-02-20 18:12:56,180 INFO L854 garLoopResultBuilder]: At program point L527(lines 522 529) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2 .cse0) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:56,181 INFO L854 garLoopResultBuilder]: At program point L560-1(lines 552 580) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse7 (<= 1 ~pumpRunning~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse18 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (<= ~waterLevel~0 1)) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse22 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| ~waterLevel~0)) (.cse20 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not .cse8))) (let ((.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (and .cse0 .cse18 .cse6 .cse21 .cse22 .cse20 .cse4)) (.cse12 (and .cse7 .cse17 .cse18 .cse19 .cse6 .cse21 .cse22 .cse20)) (.cse16 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|))) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (not (= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4) .cse5 (and .cse6 .cse3) (and .cse7 .cse1 .cse2 .cse3) .cse8 .cse9) (or .cse10 .cse11 .cse12 .cse13 .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse10 .cse11 .cse12 .cse8 .cse14) (or .cse15 .cse5 (and .cse16 .cse17 .cse0 .cse18 .cse3)) (or .cse10 (not (< 1 |old(~waterLevel~0)|)) .cse8 (= ~waterLevel~0 1) .cse9) (or (and .cse16 .cse17 .cse18 .cse19 .cse3 .cse20) .cse15 .cse10 .cse11 .cse12 .cse8 (and .cse16 .cse0 .cse18 .cse3 .cse20 .cse4) .cse14) (or .cse5 (and .cse17 .cse0 .cse1 .cse2 .cse3) .cse13 .cse4))))) [2022-02-20 18:12:56,181 INFO L854 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse2 (and (<= 1 ~pumpRunning~0) .cse5 .cse6 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 (not .cse3))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (and .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse2 .cse3 .cse4) (or .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (= ~waterLevel~0 1) .cse7) .cse3 .cse0)))) [2022-02-20 18:12:56,181 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 766 792) no Hoare annotation was computed. [2022-02-20 18:12:56,181 INFO L854 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-02-20 18:12:56,181 INFO L858 garLoopResultBuilder]: For program point L565(lines 565 571) no Hoare annotation was computed. [2022-02-20 18:12:56,181 INFO L854 garLoopResultBuilder]: At program point L846(line 846) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse2 .cse1) (or .cse0 .cse1 (and .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:56,181 INFO L854 garLoopResultBuilder]: At program point L685(lines 680 688) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-02-20 18:12:56,182 INFO L854 garLoopResultBuilder]: At program point L846-1(lines 827 851) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse9 (<= 1 ~pumpRunning~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse17 (<= ~waterLevel~0 1)) (.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not .cse6)) (.cse15 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse15 .cse10)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse9 .cse12 .cse13 .cse17 .cse18 .cse14 .cse2)) (.cse7 (and .cse15 .cse17 .cse18 .cse14)) (.cse16 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse8 (and .cse9 .cse10) .cse5) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse6 (= ~waterLevel~0 1) .cse1) (or .cse11 .cse3 (and .cse12 .cse13 .cse10 .cse14) .cse4 (and .cse15 .cse10 .cse14) .cse6 .cse7 .cse16) (or .cse11 .cse0 .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse6 .cse7 .cse16))))) [2022-02-20 18:12:56,182 INFO L858 garLoopResultBuilder]: For program point L780-1(lines 780 786) no Hoare annotation was computed. [2022-02-20 18:12:56,182 INFO L854 garLoopResultBuilder]: At program point L549(lines 542 551) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse3) (not (<= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2)))) [2022-02-20 18:12:56,182 INFO L854 garLoopResultBuilder]: At program point L958(lines 943 961) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-02-20 18:12:56,182 INFO L854 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse17 (<= 1 ~pumpRunning~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse18 (<= ~waterLevel~0 1)) (.cse19 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse11 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| ~waterLevel~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and .cse1 .cse2 .cse18 .cse19 .cse11 .cse12)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (and .cse17 .cse13 .cse2 .cse14 .cse18 .cse19 .cse11 .cse12)) (.cse8 (= 0 ~systemActive~0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse8 .cse9) (let ((.cse10 (= ~waterLevel~0 1))) (or .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 .cse10 .cse11 .cse12) .cse8 .cse4 (and .cse13 .cse2 .cse14 .cse10 .cse11 .cse12))) (or .cse0 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse16 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|)))) (or .cse5 .cse15 (and .cse16 .cse1 .cse2 .cse3 .cse12) .cse6 .cse7 .cse8 (and .cse17 .cse16 .cse13 .cse2 .cse14 .cse3 .cse12) .cse9)) (or .cse15 .cse0 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2))))) [2022-02-20 18:12:56,182 INFO L858 garLoopResultBuilder]: For program point L562-1(line 562) no Hoare annotation was computed. [2022-02-20 18:12:56,182 INFO L858 garLoopResultBuilder]: For program point L773(lines 773 779) no Hoare annotation was computed. [2022-02-20 18:12:56,182 INFO L858 garLoopResultBuilder]: For program point L773-2(lines 769 791) no Hoare annotation was computed. [2022-02-20 18:12:56,182 INFO L858 garLoopResultBuilder]: For program point L835(lines 835 843) no Hoare annotation was computed. [2022-02-20 18:12:56,182 INFO L858 garLoopResultBuilder]: For program point L831(lines 831 848) no Hoare annotation was computed. [2022-02-20 18:12:56,182 INFO L854 garLoopResultBuilder]: At program point L662(lines 657 665) the Hoare annotation is: (let ((.cse12 (<= 1 ~pumpRunning~0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse18 (<= ~waterLevel~0 1)) (.cse19 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse13 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse11 .cse13 .cse14)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (and .cse11 .cse5 .cse18 .cse19 .cse8)) (.cse16 (and .cse12 .cse4 .cse5 .cse6 .cse18 .cse19 .cse8)) (.cse3 (= 0 ~systemActive~0)) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (let ((.cse7 (= ~waterLevel~0 1))) (or (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse10 (and .cse11 .cse5 .cse7 .cse8))) (or .cse0 .cse1 .cse2 (and .cse12 .cse13 .cse14)) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (and .cse11 .cse5 .cse14)) (or (and .cse12 .cse4 .cse5 .cse6 .cse14 .cse8) .cse9 .cse15 (and .cse11 .cse5 .cse14 .cse8) .cse16 .cse3 .cse10 .cse17) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse15 .cse16 .cse3 .cse17)))) [2022-02-20 18:12:56,183 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 766 792) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 (< 1 ~waterLevel~0) .cse3) .cse4 .cse5) (or (and .cse6 .cse2 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse8) (or .cse8 (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3) .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse4 .cse5 (and .cse1 .cse2 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 766 792) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L854 garLoopResultBuilder]: At program point L547(line 547) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 (< 1 ~waterLevel~0) .cse3) .cse4 .cse5) (or (and .cse6 .cse2 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse8) (or .cse8 (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3) .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse4 .cse5 (and .cse1 .cse2 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point L547-1(line 547) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2022-02-20 18:12:56,183 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-02-20 18:12:56,183 INFO L861 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2022-02-20 18:12:56,184 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-02-20 18:12:56,184 INFO L861 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2022-02-20 18:12:56,184 INFO L861 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2022-02-20 18:12:56,184 INFO L858 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2022-02-20 18:12:56,184 INFO L858 garLoopResultBuilder]: For program point L704(lines 704 708) no Hoare annotation was computed. [2022-02-20 18:12:56,184 INFO L854 garLoopResultBuilder]: At program point L539(lines 534 541) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:12:56,184 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:12:56,184 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:12:56,184 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:12:56,184 INFO L854 garLoopResultBuilder]: At program point L982(lines 977 984) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 (<= ~waterLevel~0 2) .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5))) [2022-02-20 18:12:56,185 INFO L861 garLoopResultBuilder]: At program point L755(lines 692 759) the Hoare annotation is: true [2022-02-20 18:12:56,185 INFO L858 garLoopResultBuilder]: For program point L722(lines 722 728) no Hoare annotation was computed. [2022-02-20 18:12:56,185 INFO L858 garLoopResultBuilder]: For program point L722-1(lines 722 728) no Hoare annotation was computed. [2022-02-20 18:12:56,185 INFO L854 garLoopResultBuilder]: At program point L974(lines 962 976) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= 0 ~systemActive~0)) [2022-02-20 18:12:56,185 INFO L854 garLoopResultBuilder]: At program point L714(line 714) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 (<= ~waterLevel~0 2) .cse3))) [2022-02-20 18:12:56,185 INFO L858 garLoopResultBuilder]: For program point L966(lines 966 972) no Hoare annotation was computed. [2022-02-20 18:12:56,185 INFO L858 garLoopResultBuilder]: For program point L966-1(lines 966 972) no Hoare annotation was computed. [2022-02-20 18:12:56,185 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:12:56,185 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:12:56,186 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2022-02-20 18:12:56,186 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2022-02-20 18:12:56,186 INFO L854 garLoopResultBuilder]: At program point L1016(lines 1011 1019) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:12:56,186 INFO L854 garLoopResultBuilder]: At program point L1008(lines 1004 1010) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:12:56,186 INFO L854 garLoopResultBuilder]: At program point L752(lines 701 753) the Hoare annotation is: false [2022-02-20 18:12:56,186 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2022-02-20 18:12:56,186 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2022-02-20 18:12:56,186 INFO L858 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2022-02-20 18:12:56,187 INFO L854 garLoopResultBuilder]: At program point L740-2(lines 732 747) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2022-02-20 18:12:56,187 INFO L858 garLoopResultBuilder]: For program point L703(lines 702 751) no Hoare annotation was computed. [2022-02-20 18:12:56,187 INFO L858 garLoopResultBuilder]: For program point L732(lines 732 747) no Hoare annotation was computed. [2022-02-20 18:12:56,187 INFO L854 garLoopResultBuilder]: At program point L724(line 724) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2022-02-20 18:12:56,187 INFO L854 garLoopResultBuilder]: At program point L749(lines 702 751) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 (<= ~waterLevel~0 2) .cse3))) [2022-02-20 18:12:56,187 INFO L854 garLoopResultBuilder]: At program point L1001(lines 997 1003) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:12:56,187 INFO L858 garLoopResultBuilder]: For program point L712(lines 712 718) no Hoare annotation was computed. [2022-02-20 18:12:56,187 INFO L854 garLoopResultBuilder]: At program point L968(line 968) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2022-02-20 18:12:56,187 INFO L858 garLoopResultBuilder]: For program point L712-1(lines 712 718) no Hoare annotation was computed. [2022-02-20 18:12:56,188 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 801 825) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-02-20 18:12:56,188 INFO L854 garLoopResultBuilder]: At program point L857(lines 852 859) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:56,188 INFO L854 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-02-20 18:12:56,188 INFO L858 garLoopResultBuilder]: For program point L820-1(lines 801 825) no Hoare annotation was computed. [2022-02-20 18:12:56,188 INFO L858 garLoopResultBuilder]: For program point L670(lines 670 676) no Hoare annotation was computed. [2022-02-20 18:12:56,188 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 801 825) no Hoare annotation was computed. [2022-02-20 18:12:56,188 INFO L854 garLoopResultBuilder]: At program point L815(line 815) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:56,188 INFO L854 garLoopResultBuilder]: At program point L939(lines 924 942) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse2))) [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point L809(lines 809 817) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point L805(lines 805 822) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L854 garLoopResultBuilder]: At program point L675(lines 666 679) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse2))) [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point L933-2(lines 933 937) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 601 612) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point L605-1(lines 601 612) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 601 612) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1 .cse2) (or (not (= ~pumpRunning~0 0)) .cse1 (not (<= |old(~waterLevel~0)| 2))))) [2022-02-20 18:12:56,189 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 879 887) no Hoare annotation was computed. [2022-02-20 18:12:56,189 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 879 887) the Hoare annotation is: true [2022-02-20 18:12:56,190 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 879 887) no Hoare annotation was computed. [2022-02-20 18:12:56,192 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:56,193 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:12:56,195 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:12:56,195 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:56,195 WARN L170 areAnnotationChecker]: L617-1 has no Hoare annotation [2022-02-20 18:12:56,195 WARN L170 areAnnotationChecker]: L617-1 has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: L805 has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: L605-1 has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: L605-1 has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: L617-1 has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: L547-1 has no Hoare annotation [2022-02-20 18:12:56,198 WARN L170 areAnnotationChecker]: L424-1 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L805 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L805 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L605-1 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L820-1 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L547-1 has no Hoare annotation [2022-02-20 18:12:56,199 WARN L170 areAnnotationChecker]: L424-1 has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: L670 has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: L670 has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: L820-1 has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: L780-1 has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: L966-1 has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:56,200 WARN L170 areAnnotationChecker]: L722-1 has no Hoare annotation [2022-02-20 18:12:56,201 WARN L170 areAnnotationChecker]: L773 has no Hoare annotation [2022-02-20 18:12:56,201 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-02-20 18:12:56,201 WARN L170 areAnnotationChecker]: L933 has no Hoare annotation [2022-02-20 18:12:56,201 WARN L170 areAnnotationChecker]: L712-1 has no Hoare annotation [2022-02-20 18:12:56,201 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-02-20 18:12:56,201 WARN L170 areAnnotationChecker]: L780-1 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L732 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L732 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L773 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L773 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L933 has no Hoare annotation [2022-02-20 18:12:56,202 WARN L170 areAnnotationChecker]: L933 has no Hoare annotation [2022-02-20 18:12:56,203 WARN L170 areAnnotationChecker]: L722 has no Hoare annotation [2022-02-20 18:12:56,203 WARN L170 areAnnotationChecker]: L722 has no Hoare annotation [2022-02-20 18:12:56,203 WARN L170 areAnnotationChecker]: L564 has no Hoare annotation [2022-02-20 18:12:56,203 WARN L170 areAnnotationChecker]: L564 has no Hoare annotation [2022-02-20 18:12:56,203 WARN L170 areAnnotationChecker]: L560 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L593 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L593 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L773-2 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L773-2 has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:56,205 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L933-2 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L722-1 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L565 has no Hoare annotation [2022-02-20 18:12:56,206 WARN L170 areAnnotationChecker]: L565 has no Hoare annotation [2022-02-20 18:12:56,207 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:56,207 WARN L170 areAnnotationChecker]: L560 has no Hoare annotation [2022-02-20 18:12:56,207 WARN L170 areAnnotationChecker]: L560 has no Hoare annotation [2022-02-20 18:12:56,208 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-02-20 18:12:56,208 WARN L170 areAnnotationChecker]: L966 has no Hoare annotation [2022-02-20 18:12:56,209 WARN L170 areAnnotationChecker]: L966 has no Hoare annotation [2022-02-20 18:12:56,209 WARN L170 areAnnotationChecker]: L773-2 has no Hoare annotation [2022-02-20 18:12:56,209 WARN L170 areAnnotationChecker]: L831 has no Hoare annotation [2022-02-20 18:12:56,209 WARN L170 areAnnotationChecker]: L831 has no Hoare annotation [2022-02-20 18:12:56,209 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L508-2 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-02-20 18:12:56,210 WARN L170 areAnnotationChecker]: L966-1 has no Hoare annotation [2022-02-20 18:12:56,211 WARN L170 areAnnotationChecker]: L952 has no Hoare annotation [2022-02-20 18:12:56,212 WARN L170 areAnnotationChecker]: L508-2 has no Hoare annotation [2022-02-20 18:12:56,212 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-02-20 18:12:56,212 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:56,212 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-02-20 18:12:56,212 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: L704 has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: L952 has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: L952 has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:56,214 WARN L170 areAnnotationChecker]: L820-1 has no Hoare annotation [2022-02-20 18:12:56,215 WARN L170 areAnnotationChecker]: L820-1 has no Hoare annotation [2022-02-20 18:12:56,215 WARN L170 areAnnotationChecker]: L712 has no Hoare annotation [2022-02-20 18:12:56,215 WARN L170 areAnnotationChecker]: L712 has no Hoare annotation [2022-02-20 18:12:56,215 WARN L170 areAnnotationChecker]: L952-2 has no Hoare annotation [2022-02-20 18:12:56,215 WARN L170 areAnnotationChecker]: L712-1 has no Hoare annotation [2022-02-20 18:12:56,216 WARN L170 areAnnotationChecker]: L835 has no Hoare annotation [2022-02-20 18:12:56,216 WARN L170 areAnnotationChecker]: L835 has no Hoare annotation [2022-02-20 18:12:56,216 WARN L170 areAnnotationChecker]: L835 has no Hoare annotation [2022-02-20 18:12:56,217 INFO L163 areAnnotationChecker]: CFG has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:12:56,257 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:12:56 BoogieIcfgContainer [2022-02-20 18:12:56,271 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:12:56,271 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:12:56,272 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:12:56,272 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:12:56,272 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:23" (3/4) ... [2022-02-20 18:12:56,274 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:56,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:12:56,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:12:56,283 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-02-20 18:12:56,283 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:12:56,283 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:12:56,284 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:12:56,284 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:12:56,284 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:56,284 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:56,299 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:12:56,299 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:12:56,300 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:12:56,300 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) [2022-02-20 18:12:56,300 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-02-20 18:12:56,301 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:56,301 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((pumpRunning == 0 && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-02-20 18:12:56,301 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0 && 2 == \result) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 == \result) && tmp == 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((!(2 <= tmp) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((((((((((!(2 <= tmp) && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((((!(2 <= tmp) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && tmp == 2) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) [2022-02-20 18:12:56,301 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:56,301 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:56,302 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 0 == systemActive [2022-02-20 18:12:56,302 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:56,302 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:56,302 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) || \result == 1) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-02-20 18:12:56,302 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:56,303 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (tmp___0 == 0 && \result == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-02-20 18:12:56,303 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:12:56,315 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:12:56,316 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:12:56,316 INFO L158 Benchmark]: Toolchain (without parser) took 33568.61ms. Allocated memory was 104.9MB in the beginning and 285.2MB in the end (delta: 180.4MB). Free memory was 73.8MB in the beginning and 140.7MB in the end (delta: -66.9MB). Peak memory consumption was 111.6MB. Max. memory is 16.1GB. [2022-02-20 18:12:56,317 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 104.9MB. Free memory is still 60.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:56,317 INFO L158 Benchmark]: CACSL2BoogieTranslator took 358.30ms. Allocated memory is still 104.9MB. Free memory was 73.8MB in the beginning and 68.7MB in the end (delta: 5.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:12:56,317 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.64ms. Allocated memory is still 104.9MB. Free memory was 68.7MB in the beginning and 65.7MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:56,317 INFO L158 Benchmark]: Boogie Preprocessor took 31.21ms. Allocated memory is still 104.9MB. Free memory was 65.7MB in the beginning and 64.1MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:56,318 INFO L158 Benchmark]: RCFGBuilder took 431.87ms. Allocated memory was 104.9MB in the beginning and 136.3MB in the end (delta: 31.5MB). Free memory was 63.6MB in the beginning and 107.0MB in the end (delta: -43.3MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. [2022-02-20 18:12:56,318 INFO L158 Benchmark]: TraceAbstraction took 32638.95ms. Allocated memory was 136.3MB in the beginning and 285.2MB in the end (delta: 148.9MB). Free memory was 106.3MB in the beginning and 145.9MB in the end (delta: -39.6MB). Peak memory consumption was 168.4MB. Max. memory is 16.1GB. [2022-02-20 18:12:56,318 INFO L158 Benchmark]: Witness Printer took 44.23ms. Allocated memory is still 285.2MB. Free memory was 145.9MB in the beginning and 140.7MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:56,319 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 104.9MB. Free memory is still 60.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 358.30ms. Allocated memory is still 104.9MB. Free memory was 73.8MB in the beginning and 68.7MB in the end (delta: 5.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.64ms. Allocated memory is still 104.9MB. Free memory was 68.7MB in the beginning and 65.7MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.21ms. Allocated memory is still 104.9MB. Free memory was 65.7MB in the beginning and 64.1MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 431.87ms. Allocated memory was 104.9MB in the beginning and 136.3MB in the end (delta: 31.5MB). Free memory was 63.6MB in the beginning and 107.0MB in the end (delta: -43.3MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. * TraceAbstraction took 32638.95ms. Allocated memory was 136.3MB in the beginning and 285.2MB in the end (delta: 148.9MB). Free memory was 106.3MB in the beginning and 145.9MB in the end (delta: -39.6MB). Peak memory consumption was 168.4MB. Max. memory is 16.1GB. * Witness Printer took 44.23ms. Allocated memory is still 285.2MB. Free memory was 145.9MB in the beginning and 140.7MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 32.5s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 16.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2969 SdHoareTripleChecker+Valid, 4.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2922 mSDsluCounter, 6873 SdHoareTripleChecker+Invalid, 4.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5203 mSDsCounter, 995 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4206 IncrementalHoareTripleChecker+Invalid, 5201 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 995 mSolverCounterUnsat, 1670 mSDtfsCounter, 4206 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 882 GetRequests, 695 SyntacticMatches, 6 SemanticMatches, 181 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1503 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=853occurred in iteration=11, InterpolantAutomatonStates: 162, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 460 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2288 PreInvPairs, 2662 NumberOfFragments, 2926 HoareAnnotationTreeSize, 2288 FomulaSimplifications, 4663 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 46 FomulaSimplificationsInter, 31886 FormulaSimplificationTreeSizeReductionInter, 5.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.1s InterpolantComputationTime, 1136 NumberOfCodeBlocks, 1136 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1393 ConstructedInterpolants, 0 QuantifiedInterpolants, 2747 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1161 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 825/901 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((pumpRunning == 0 && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (tmp___0 == 0 && \result == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 0 == systemActive - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 1011]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 680]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0 && 2 == \result) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 == \result) && tmp == 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((!(2 <= tmp) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((((((((((!(2 <= tmp) && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((((!(2 <= tmp) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && tmp == 2) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) || \result == 1) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1004]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 997]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:12:56,358 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE