./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product57.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product57.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash aba011a2dee79947f4cca7910fc4583b21e1f3cb9acd1affa050aa7677352666 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:12:43,267 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:12:43,271 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:12:43,315 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:12:43,316 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:12:43,320 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:12:43,321 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:12:43,324 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:12:43,326 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:12:43,330 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:12:43,331 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:12:43,332 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:12:43,333 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:12:43,336 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:12:43,337 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:12:43,339 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:12:43,340 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:12:43,341 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:12:43,342 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:12:43,348 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:12:43,350 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:12:43,351 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:12:43,352 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:12:43,353 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:12:43,361 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:12:43,362 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:12:43,362 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:12:43,364 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:12:43,365 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:12:43,366 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:12:43,366 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:12:43,367 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:12:43,368 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:12:43,369 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:12:43,370 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:12:43,371 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:12:43,371 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:12:43,371 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:12:43,372 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:12:43,373 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:12:43,373 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:12:43,374 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:12:43,408 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:12:43,409 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:12:43,409 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:12:43,409 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:12:43,410 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:12:43,410 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:12:43,411 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:12:43,411 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:12:43,411 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:12:43,411 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:12:43,412 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:12:43,412 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:12:43,412 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:12:43,412 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:12:43,412 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:12:43,413 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:12:43,413 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:12:43,413 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:12:43,413 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:12:43,413 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:12:43,414 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:12:43,414 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:12:43,414 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:12:43,414 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:12:43,414 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:12:43,415 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:12:43,415 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:12:43,415 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:12:43,415 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:12:43,416 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:12:43,416 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:12:43,416 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:12:43,416 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:12:43,416 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> aba011a2dee79947f4cca7910fc4583b21e1f3cb9acd1affa050aa7677352666 [2022-02-20 18:12:43,639 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:12:43,672 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:12:43,674 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:12:43,676 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:12:43,677 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:12:43,678 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product57.cil.c [2022-02-20 18:12:43,755 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2958a300e/d6f33860a1f64eb2b4c665710091d56e/FLAG51252b3e8 [2022-02-20 18:12:44,193 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:12:44,194 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product57.cil.c [2022-02-20 18:12:44,210 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2958a300e/d6f33860a1f64eb2b4c665710091d56e/FLAG51252b3e8 [2022-02-20 18:12:44,707 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2958a300e/d6f33860a1f64eb2b4c665710091d56e [2022-02-20 18:12:44,712 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:12:44,714 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:12:44,717 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:12:44,717 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:12:44,719 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:12:44,720 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:12:44" (1/1) ... [2022-02-20 18:12:44,721 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1c667028 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:44, skipping insertion in model container [2022-02-20 18:12:44,721 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:12:44" (1/1) ... [2022-02-20 18:12:44,727 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:12:44,771 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:12:44,899 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product57.cil.c[1605,1618] [2022-02-20 18:12:45,006 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:12:45,015 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:12:45,026 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product57.cil.c[1605,1618] [2022-02-20 18:12:45,088 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:12:45,107 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:12:45,107 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45 WrapperNode [2022-02-20 18:12:45,107 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:12:45,109 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:12:45,109 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:12:45,109 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:12:45,116 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,137 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,190 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 285 [2022-02-20 18:12:45,195 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:12:45,199 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:12:45,199 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:12:45,199 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:12:45,206 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,207 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,209 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,210 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,216 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,221 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,223 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,225 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:12:45,226 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:12:45,226 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:12:45,227 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:12:45,227 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (1/1) ... [2022-02-20 18:12:45,241 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:12:45,263 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:45,281 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:12:45,286 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:12:45,317 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:12:45,318 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:12:45,318 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:12:45,318 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:12:45,318 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:12:45,319 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:12:45,319 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:12:45,319 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:45,320 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:45,321 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:12:45,321 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:12:45,321 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:12:45,322 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:12:45,322 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:12:45,322 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:12:45,322 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:12:45,322 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:12:45,322 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:12:45,402 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:12:45,406 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:12:45,764 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:12:45,771 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:12:45,772 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:12:45,774 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:45 BoogieIcfgContainer [2022-02-20 18:12:45,774 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:12:45,775 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:12:45,775 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:12:45,778 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:12:45,779 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:12:44" (1/3) ... [2022-02-20 18:12:45,779 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44b2a940 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:12:45, skipping insertion in model container [2022-02-20 18:12:45,780 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:12:45" (2/3) ... [2022-02-20 18:12:45,780 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44b2a940 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:12:45, skipping insertion in model container [2022-02-20 18:12:45,780 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:45" (3/3) ... [2022-02-20 18:12:45,781 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product57.cil.c [2022-02-20 18:12:45,786 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:12:45,786 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:12:45,833 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:12:45,839 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:12:45,839 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:12:45,881 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 83 states have internal predecessors, (103), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:12:45,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:12:45,903 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:45,904 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:45,904 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:45,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:45,912 INFO L85 PathProgramCache]: Analyzing trace with hash 1773170943, now seen corresponding path program 1 times [2022-02-20 18:12:45,921 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:45,923 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980930456] [2022-02-20 18:12:45,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:45,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:46,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:46,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:12:46,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:46,203 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {99#true} is VALID [2022-02-20 18:12:46,203 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:12:46,205 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {99#true} {100#false} #251#return; {100#false} is VALID [2022-02-20 18:12:46,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:12:46,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:46,218 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {99#true} is VALID [2022-02-20 18:12:46,218 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:12:46,218 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {99#true} {100#false} #257#return; {100#false} is VALID [2022-02-20 18:12:46,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {99#true} is VALID [2022-02-20 18:12:46,225 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {99#true} is VALID [2022-02-20 18:12:46,225 INFO L290 TraceCheckUtils]: 2: Hoare triple {99#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {99#true} is VALID [2022-02-20 18:12:46,225 INFO L290 TraceCheckUtils]: 3: Hoare triple {99#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {99#true} is VALID [2022-02-20 18:12:46,226 INFO L290 TraceCheckUtils]: 4: Hoare triple {99#true} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {99#true} is VALID [2022-02-20 18:12:46,226 INFO L290 TraceCheckUtils]: 5: Hoare triple {99#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {99#true} is VALID [2022-02-20 18:12:46,226 INFO L290 TraceCheckUtils]: 6: Hoare triple {99#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {99#true} is VALID [2022-02-20 18:12:46,226 INFO L290 TraceCheckUtils]: 7: Hoare triple {99#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {99#true} is VALID [2022-02-20 18:12:46,227 INFO L290 TraceCheckUtils]: 8: Hoare triple {99#true} assume !true; {100#false} is VALID [2022-02-20 18:12:46,228 INFO L272 TraceCheckUtils]: 9: Hoare triple {100#false} call cleanup(); {100#false} is VALID [2022-02-20 18:12:46,228 INFO L290 TraceCheckUtils]: 10: Hoare triple {100#false} havoc ~i~0;havoc ~__cil_tmp2~0; {100#false} is VALID [2022-02-20 18:12:46,228 INFO L272 TraceCheckUtils]: 11: Hoare triple {100#false} call timeShift(); {100#false} is VALID [2022-02-20 18:12:46,229 INFO L290 TraceCheckUtils]: 12: Hoare triple {100#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {100#false} is VALID [2022-02-20 18:12:46,230 INFO L272 TraceCheckUtils]: 13: Hoare triple {100#false} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {99#true} is VALID [2022-02-20 18:12:46,230 INFO L290 TraceCheckUtils]: 14: Hoare triple {99#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {99#true} is VALID [2022-02-20 18:12:46,230 INFO L290 TraceCheckUtils]: 15: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:12:46,230 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {99#true} {100#false} #251#return; {100#false} is VALID [2022-02-20 18:12:46,231 INFO L290 TraceCheckUtils]: 17: Hoare triple {100#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {100#false} is VALID [2022-02-20 18:12:46,231 INFO L290 TraceCheckUtils]: 18: Hoare triple {100#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {100#false} is VALID [2022-02-20 18:12:46,232 INFO L290 TraceCheckUtils]: 19: Hoare triple {100#false} assume !(0 != ~pumpRunning~0); {100#false} is VALID [2022-02-20 18:12:46,232 INFO L290 TraceCheckUtils]: 20: Hoare triple {100#false} assume !(0 != ~systemActive~0); {100#false} is VALID [2022-02-20 18:12:46,232 INFO L290 TraceCheckUtils]: 21: Hoare triple {100#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {100#false} is VALID [2022-02-20 18:12:46,232 INFO L290 TraceCheckUtils]: 22: Hoare triple {100#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {100#false} is VALID [2022-02-20 18:12:46,233 INFO L290 TraceCheckUtils]: 23: Hoare triple {100#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {100#false} is VALID [2022-02-20 18:12:46,233 INFO L272 TraceCheckUtils]: 24: Hoare triple {100#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {99#true} is VALID [2022-02-20 18:12:46,233 INFO L290 TraceCheckUtils]: 25: Hoare triple {99#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {99#true} is VALID [2022-02-20 18:12:46,233 INFO L290 TraceCheckUtils]: 26: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:12:46,234 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {99#true} {100#false} #257#return; {100#false} is VALID [2022-02-20 18:12:46,234 INFO L290 TraceCheckUtils]: 28: Hoare triple {100#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {100#false} is VALID [2022-02-20 18:12:46,234 INFO L290 TraceCheckUtils]: 29: Hoare triple {100#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {100#false} is VALID [2022-02-20 18:12:46,235 INFO L290 TraceCheckUtils]: 30: Hoare triple {100#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {100#false} is VALID [2022-02-20 18:12:46,235 INFO L290 TraceCheckUtils]: 31: Hoare triple {100#false} assume !false; {100#false} is VALID [2022-02-20 18:12:46,236 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:46,237 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:46,237 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980930456] [2022-02-20 18:12:46,238 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980930456] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:46,238 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:46,239 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:12:46,242 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1657273911] [2022-02-20 18:12:46,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:46,248 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:12:46,250 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:46,254 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:46,295 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:46,296 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:12:46,296 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:46,317 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:12:46,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:12:46,323 INFO L87 Difference]: Start difference. First operand has 96 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 83 states have internal predecessors, (103), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:46,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:46,459 INFO L93 Difference]: Finished difference Result 183 states and 248 transitions. [2022-02-20 18:12:46,459 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:12:46,460 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:12:46,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:46,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:46,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 248 transitions. [2022-02-20 18:12:46,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:46,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 248 transitions. [2022-02-20 18:12:46,490 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 248 transitions. [2022-02-20 18:12:46,705 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 248 edges. 248 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:46,721 INFO L225 Difference]: With dead ends: 183 [2022-02-20 18:12:46,721 INFO L226 Difference]: Without dead ends: 87 [2022-02-20 18:12:46,725 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:12:46,729 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:46,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:46,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-02-20 18:12:46,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2022-02-20 18:12:46,784 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:46,788 INFO L82 GeneralOperation]: Start isEquivalent. First operand 87 states. Second operand has 87 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 75 states have internal predecessors, (89), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:46,791 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand has 87 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 75 states have internal predecessors, (89), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:46,792 INFO L87 Difference]: Start difference. First operand 87 states. Second operand has 87 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 75 states have internal predecessors, (89), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:46,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:46,812 INFO L93 Difference]: Finished difference Result 87 states and 112 transitions. [2022-02-20 18:12:46,813 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:12:46,818 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:46,819 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:46,820 INFO L74 IsIncluded]: Start isIncluded. First operand has 87 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 75 states have internal predecessors, (89), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 87 states. [2022-02-20 18:12:46,821 INFO L87 Difference]: Start difference. First operand has 87 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 75 states have internal predecessors, (89), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 87 states. [2022-02-20 18:12:46,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:46,832 INFO L93 Difference]: Finished difference Result 87 states and 112 transitions. [2022-02-20 18:12:46,832 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:12:46,834 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:46,836 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:46,836 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:46,836 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:46,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 75 states have internal predecessors, (89), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:46,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2022-02-20 18:12:46,845 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 32 [2022-02-20 18:12:46,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:46,845 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2022-02-20 18:12:46,845 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:46,846 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:12:46,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-02-20 18:12:46,848 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:46,848 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:46,849 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:12:46,849 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:46,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:46,850 INFO L85 PathProgramCache]: Analyzing trace with hash -1531656934, now seen corresponding path program 1 times [2022-02-20 18:12:46,850 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:46,851 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710964394] [2022-02-20 18:12:46,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:46,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:46,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:46,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:12:46,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:46,949 INFO L290 TraceCheckUtils]: 0: Hoare triple {677#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {677#true} is VALID [2022-02-20 18:12:46,949 INFO L290 TraceCheckUtils]: 1: Hoare triple {677#true} assume true; {677#true} is VALID [2022-02-20 18:12:46,950 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {677#true} {678#false} #251#return; {678#false} is VALID [2022-02-20 18:12:46,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:12:46,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:46,960 INFO L290 TraceCheckUtils]: 0: Hoare triple {677#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {677#true} is VALID [2022-02-20 18:12:46,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {677#true} assume true; {677#true} is VALID [2022-02-20 18:12:46,961 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {677#true} {678#false} #257#return; {678#false} is VALID [2022-02-20 18:12:46,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {677#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {677#true} is VALID [2022-02-20 18:12:46,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {677#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {677#true} is VALID [2022-02-20 18:12:46,962 INFO L290 TraceCheckUtils]: 2: Hoare triple {677#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {677#true} is VALID [2022-02-20 18:12:46,963 INFO L290 TraceCheckUtils]: 3: Hoare triple {677#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {677#true} is VALID [2022-02-20 18:12:46,963 INFO L290 TraceCheckUtils]: 4: Hoare triple {677#true} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {677#true} is VALID [2022-02-20 18:12:46,966 INFO L290 TraceCheckUtils]: 5: Hoare triple {677#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {677#true} is VALID [2022-02-20 18:12:46,967 INFO L290 TraceCheckUtils]: 6: Hoare triple {677#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {677#true} is VALID [2022-02-20 18:12:46,968 INFO L290 TraceCheckUtils]: 7: Hoare triple {677#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {679#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:46,969 INFO L290 TraceCheckUtils]: 8: Hoare triple {679#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {679#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:46,969 INFO L290 TraceCheckUtils]: 9: Hoare triple {679#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {678#false} is VALID [2022-02-20 18:12:46,970 INFO L272 TraceCheckUtils]: 10: Hoare triple {678#false} call cleanup(); {678#false} is VALID [2022-02-20 18:12:46,970 INFO L290 TraceCheckUtils]: 11: Hoare triple {678#false} havoc ~i~0;havoc ~__cil_tmp2~0; {678#false} is VALID [2022-02-20 18:12:46,971 INFO L272 TraceCheckUtils]: 12: Hoare triple {678#false} call timeShift(); {678#false} is VALID [2022-02-20 18:12:46,971 INFO L290 TraceCheckUtils]: 13: Hoare triple {678#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {678#false} is VALID [2022-02-20 18:12:46,971 INFO L272 TraceCheckUtils]: 14: Hoare triple {678#false} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {677#true} is VALID [2022-02-20 18:12:46,972 INFO L290 TraceCheckUtils]: 15: Hoare triple {677#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {677#true} is VALID [2022-02-20 18:12:46,973 INFO L290 TraceCheckUtils]: 16: Hoare triple {677#true} assume true; {677#true} is VALID [2022-02-20 18:12:46,973 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {677#true} {678#false} #251#return; {678#false} is VALID [2022-02-20 18:12:46,973 INFO L290 TraceCheckUtils]: 18: Hoare triple {678#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {678#false} is VALID [2022-02-20 18:12:46,973 INFO L290 TraceCheckUtils]: 19: Hoare triple {678#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {678#false} is VALID [2022-02-20 18:12:46,973 INFO L290 TraceCheckUtils]: 20: Hoare triple {678#false} assume !(0 != ~pumpRunning~0); {678#false} is VALID [2022-02-20 18:12:46,974 INFO L290 TraceCheckUtils]: 21: Hoare triple {678#false} assume !(0 != ~systemActive~0); {678#false} is VALID [2022-02-20 18:12:46,974 INFO L290 TraceCheckUtils]: 22: Hoare triple {678#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {678#false} is VALID [2022-02-20 18:12:46,974 INFO L290 TraceCheckUtils]: 23: Hoare triple {678#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {678#false} is VALID [2022-02-20 18:12:46,974 INFO L290 TraceCheckUtils]: 24: Hoare triple {678#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {678#false} is VALID [2022-02-20 18:12:46,975 INFO L272 TraceCheckUtils]: 25: Hoare triple {678#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {677#true} is VALID [2022-02-20 18:12:46,975 INFO L290 TraceCheckUtils]: 26: Hoare triple {677#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {677#true} is VALID [2022-02-20 18:12:46,975 INFO L290 TraceCheckUtils]: 27: Hoare triple {677#true} assume true; {677#true} is VALID [2022-02-20 18:12:46,975 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {677#true} {678#false} #257#return; {678#false} is VALID [2022-02-20 18:12:46,976 INFO L290 TraceCheckUtils]: 29: Hoare triple {678#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {678#false} is VALID [2022-02-20 18:12:46,976 INFO L290 TraceCheckUtils]: 30: Hoare triple {678#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {678#false} is VALID [2022-02-20 18:12:46,977 INFO L290 TraceCheckUtils]: 31: Hoare triple {678#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {678#false} is VALID [2022-02-20 18:12:46,977 INFO L290 TraceCheckUtils]: 32: Hoare triple {678#false} assume !false; {678#false} is VALID [2022-02-20 18:12:46,977 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:46,978 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:46,979 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710964394] [2022-02-20 18:12:46,979 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710964394] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:46,981 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:46,983 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:46,983 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [277320825] [2022-02-20 18:12:46,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:46,985 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:12:46,986 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:46,986 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:47,013 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:47,014 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:47,014 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:47,015 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:47,015 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:47,016 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:47,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,136 INFO L93 Difference]: Finished difference Result 139 states and 179 transitions. [2022-02-20 18:12:47,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:47,136 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:12:47,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:47,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:47,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 179 transitions. [2022-02-20 18:12:47,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:47,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 179 transitions. [2022-02-20 18:12:47,144 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 179 transitions. [2022-02-20 18:12:47,304 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 179 edges. 179 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:47,307 INFO L225 Difference]: With dead ends: 139 [2022-02-20 18:12:47,307 INFO L226 Difference]: Without dead ends: 78 [2022-02-20 18:12:47,308 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:47,309 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 12 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:47,309 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 182 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:47,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-02-20 18:12:47,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-02-20 18:12:47,315 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:47,316 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,316 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,317 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,320 INFO L93 Difference]: Finished difference Result 78 states and 100 transitions. [2022-02-20 18:12:47,320 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:12:47,320 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,321 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:47,321 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 78 states. [2022-02-20 18:12:47,321 INFO L87 Difference]: Start difference. First operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 78 states. [2022-02-20 18:12:47,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,324 INFO L93 Difference]: Finished difference Result 78 states and 100 transitions. [2022-02-20 18:12:47,324 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:12:47,325 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,325 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:47,325 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:47,325 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:47,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2022-02-20 18:12:47,328 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 33 [2022-02-20 18:12:47,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:47,329 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2022-02-20 18:12:47,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:47,329 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:12:47,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-02-20 18:12:47,330 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:47,330 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:47,330 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:12:47,330 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:47,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:47,331 INFO L85 PathProgramCache]: Analyzing trace with hash 840710854, now seen corresponding path program 1 times [2022-02-20 18:12:47,331 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:47,331 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1713096792] [2022-02-20 18:12:47,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:47,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:47,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:47,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:47,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:47,440 INFO L290 TraceCheckUtils]: 0: Hoare triple {1160#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1160#true} is VALID [2022-02-20 18:12:47,441 INFO L290 TraceCheckUtils]: 1: Hoare triple {1160#true} assume true; {1160#true} is VALID [2022-02-20 18:12:47,442 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1160#true} {1165#(not (= 0 ~systemActive~0))} #251#return; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:12:47,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:47,447 INFO L290 TraceCheckUtils]: 0: Hoare triple {1160#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1160#true} is VALID [2022-02-20 18:12:47,448 INFO L290 TraceCheckUtils]: 1: Hoare triple {1160#true} assume true; {1160#true} is VALID [2022-02-20 18:12:47,448 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1160#true} {1161#false} #257#return; {1161#false} is VALID [2022-02-20 18:12:47,450 INFO L290 TraceCheckUtils]: 0: Hoare triple {1160#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1162#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:47,451 INFO L290 TraceCheckUtils]: 1: Hoare triple {1162#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {1162#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:47,452 INFO L290 TraceCheckUtils]: 2: Hoare triple {1162#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1162#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:47,452 INFO L290 TraceCheckUtils]: 3: Hoare triple {1162#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1163#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} is VALID [2022-02-20 18:12:47,453 INFO L290 TraceCheckUtils]: 4: Hoare triple {1163#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {1164#(= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)} is VALID [2022-02-20 18:12:47,453 INFO L290 TraceCheckUtils]: 5: Hoare triple {1164#(= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,454 INFO L290 TraceCheckUtils]: 6: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,454 INFO L290 TraceCheckUtils]: 7: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,455 INFO L290 TraceCheckUtils]: 8: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume !false; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,455 INFO L290 TraceCheckUtils]: 9: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0#1 < 4; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,456 INFO L290 TraceCheckUtils]: 10: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,457 INFO L290 TraceCheckUtils]: 11: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~5#1); {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,457 INFO L290 TraceCheckUtils]: 12: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,458 INFO L290 TraceCheckUtils]: 13: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~1#1); {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,458 INFO L290 TraceCheckUtils]: 14: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,459 INFO L290 TraceCheckUtils]: 15: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0#1; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,459 INFO L272 TraceCheckUtils]: 16: Hoare triple {1165#(not (= 0 ~systemActive~0))} call timeShift(); {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,460 INFO L290 TraceCheckUtils]: 17: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,460 INFO L272 TraceCheckUtils]: 18: Hoare triple {1165#(not (= 0 ~systemActive~0))} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {1160#true} is VALID [2022-02-20 18:12:47,463 INFO L290 TraceCheckUtils]: 19: Hoare triple {1160#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1160#true} is VALID [2022-02-20 18:12:47,463 INFO L290 TraceCheckUtils]: 20: Hoare triple {1160#true} assume true; {1160#true} is VALID [2022-02-20 18:12:47,464 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1160#true} {1165#(not (= 0 ~systemActive~0))} #251#return; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,464 INFO L290 TraceCheckUtils]: 22: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,465 INFO L290 TraceCheckUtils]: 23: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,465 INFO L290 TraceCheckUtils]: 24: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1165#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:47,467 INFO L290 TraceCheckUtils]: 25: Hoare triple {1165#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1161#false} is VALID [2022-02-20 18:12:47,467 INFO L290 TraceCheckUtils]: 26: Hoare triple {1161#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {1161#false} is VALID [2022-02-20 18:12:47,468 INFO L290 TraceCheckUtils]: 27: Hoare triple {1161#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {1161#false} is VALID [2022-02-20 18:12:47,469 INFO L290 TraceCheckUtils]: 28: Hoare triple {1161#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {1161#false} is VALID [2022-02-20 18:12:47,469 INFO L272 TraceCheckUtils]: 29: Hoare triple {1161#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {1160#true} is VALID [2022-02-20 18:12:47,472 INFO L290 TraceCheckUtils]: 30: Hoare triple {1160#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1160#true} is VALID [2022-02-20 18:12:47,476 INFO L290 TraceCheckUtils]: 31: Hoare triple {1160#true} assume true; {1160#true} is VALID [2022-02-20 18:12:47,477 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {1160#true} {1161#false} #257#return; {1161#false} is VALID [2022-02-20 18:12:47,477 INFO L290 TraceCheckUtils]: 33: Hoare triple {1161#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {1161#false} is VALID [2022-02-20 18:12:47,477 INFO L290 TraceCheckUtils]: 34: Hoare triple {1161#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {1161#false} is VALID [2022-02-20 18:12:47,477 INFO L290 TraceCheckUtils]: 35: Hoare triple {1161#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1161#false} is VALID [2022-02-20 18:12:47,477 INFO L290 TraceCheckUtils]: 36: Hoare triple {1161#false} assume !false; {1161#false} is VALID [2022-02-20 18:12:47,481 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:47,482 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:47,482 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1713096792] [2022-02-20 18:12:47,482 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1713096792] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:47,482 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:47,482 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:47,483 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127590636] [2022-02-20 18:12:47,483 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:47,484 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:12:47,484 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:47,484 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:47,512 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:47,512 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:47,512 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:47,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:47,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:47,513 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:47,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,804 INFO L93 Difference]: Finished difference Result 148 states and 193 transitions. [2022-02-20 18:12:47,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:12:47,805 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:12:47,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:47,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:47,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 193 transitions. [2022-02-20 18:12:47,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:47,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 193 transitions. [2022-02-20 18:12:47,812 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 193 transitions. [2022-02-20 18:12:47,970 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 193 edges. 193 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:47,972 INFO L225 Difference]: With dead ends: 148 [2022-02-20 18:12:47,972 INFO L226 Difference]: Without dead ends: 78 [2022-02-20 18:12:47,973 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:12:47,974 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 128 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:47,974 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [128 Valid, 215 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:47,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-02-20 18:12:47,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-02-20 18:12:47,982 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:47,983 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,983 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,984 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,986 INFO L93 Difference]: Finished difference Result 78 states and 99 transitions. [2022-02-20 18:12:47,987 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-02-20 18:12:47,987 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,987 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:47,988 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 78 states. [2022-02-20 18:12:47,988 INFO L87 Difference]: Start difference. First operand has 78 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 78 states. [2022-02-20 18:12:47,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:47,991 INFO L93 Difference]: Finished difference Result 78 states and 99 transitions. [2022-02-20 18:12:47,991 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-02-20 18:12:47,992 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:47,992 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:47,992 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:47,992 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:47,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:12:47,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2022-02-20 18:12:47,995 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 37 [2022-02-20 18:12:47,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:47,996 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2022-02-20 18:12:47,996 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:47,996 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-02-20 18:12:47,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-02-20 18:12:47,997 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:47,997 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:47,997 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:12:47,998 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:47,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:47,998 INFO L85 PathProgramCache]: Analyzing trace with hash 244336530, now seen corresponding path program 1 times [2022-02-20 18:12:47,998 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:47,999 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [921997306] [2022-02-20 18:12:47,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:47,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:48,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:48,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,074 INFO L290 TraceCheckUtils]: 0: Hoare triple {1660#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1660#true} is VALID [2022-02-20 18:12:48,074 INFO L290 TraceCheckUtils]: 1: Hoare triple {1660#true} assume true; {1660#true} is VALID [2022-02-20 18:12:48,076 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1660#true} {1662#(= ~pumpRunning~0 0)} #251#return; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-02-20 18:12:48,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,080 INFO L290 TraceCheckUtils]: 0: Hoare triple {1660#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1660#true} is VALID [2022-02-20 18:12:48,080 INFO L290 TraceCheckUtils]: 1: Hoare triple {1660#true} assume true; {1660#true} is VALID [2022-02-20 18:12:48,081 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1660#true} {1661#false} #257#return; {1661#false} is VALID [2022-02-20 18:12:48,082 INFO L290 TraceCheckUtils]: 0: Hoare triple {1660#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,082 INFO L290 TraceCheckUtils]: 1: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,083 INFO L290 TraceCheckUtils]: 2: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,083 INFO L290 TraceCheckUtils]: 3: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,084 INFO L290 TraceCheckUtils]: 4: Hoare triple {1662#(= ~pumpRunning~0 0)} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,084 INFO L290 TraceCheckUtils]: 5: Hoare triple {1662#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,085 INFO L290 TraceCheckUtils]: 6: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,085 INFO L290 TraceCheckUtils]: 7: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,085 INFO L290 TraceCheckUtils]: 8: Hoare triple {1662#(= ~pumpRunning~0 0)} assume !false; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,086 INFO L290 TraceCheckUtils]: 9: Hoare triple {1662#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,086 INFO L290 TraceCheckUtils]: 10: Hoare triple {1662#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,087 INFO L290 TraceCheckUtils]: 11: Hoare triple {1662#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,087 INFO L290 TraceCheckUtils]: 12: Hoare triple {1662#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,087 INFO L290 TraceCheckUtils]: 13: Hoare triple {1662#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~1#1); {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,088 INFO L290 TraceCheckUtils]: 14: Hoare triple {1662#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,088 INFO L290 TraceCheckUtils]: 15: Hoare triple {1662#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,089 INFO L272 TraceCheckUtils]: 16: Hoare triple {1662#(= ~pumpRunning~0 0)} call timeShift(); {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,089 INFO L290 TraceCheckUtils]: 17: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,089 INFO L272 TraceCheckUtils]: 18: Hoare triple {1662#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {1660#true} is VALID [2022-02-20 18:12:48,089 INFO L290 TraceCheckUtils]: 19: Hoare triple {1660#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1660#true} is VALID [2022-02-20 18:12:48,089 INFO L290 TraceCheckUtils]: 20: Hoare triple {1660#true} assume true; {1660#true} is VALID [2022-02-20 18:12:48,090 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1660#true} {1662#(= ~pumpRunning~0 0)} #251#return; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,090 INFO L290 TraceCheckUtils]: 22: Hoare triple {1662#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,090 INFO L290 TraceCheckUtils]: 23: Hoare triple {1662#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,091 INFO L290 TraceCheckUtils]: 24: Hoare triple {1662#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,091 INFO L290 TraceCheckUtils]: 25: Hoare triple {1662#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {1662#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,092 INFO L290 TraceCheckUtils]: 26: Hoare triple {1662#(= ~pumpRunning~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret54#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~10#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~10#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;isLowWaterSensorDry_~retValue_acc~6#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~6#1; {1661#false} is VALID [2022-02-20 18:12:48,092 INFO L290 TraceCheckUtils]: 27: Hoare triple {1661#false} isLowWaterLevel_#t~ret54#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret54#1 && isLowWaterLevel_#t~ret54#1 <= 2147483647;isLowWaterLevel_~tmp~10#1 := isLowWaterLevel_#t~ret54#1;havoc isLowWaterLevel_#t~ret54#1; {1661#false} is VALID [2022-02-20 18:12:48,092 INFO L290 TraceCheckUtils]: 28: Hoare triple {1661#false} assume 0 != isLowWaterLevel_~tmp~10#1;isLowWaterLevel_~tmp___0~3#1 := 0; {1661#false} is VALID [2022-02-20 18:12:48,092 INFO L290 TraceCheckUtils]: 29: Hoare triple {1661#false} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {1661#false} is VALID [2022-02-20 18:12:48,092 INFO L290 TraceCheckUtils]: 30: Hoare triple {1661#false} processEnvironment_#t~ret42#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret42#1 && processEnvironment_#t~ret42#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret42#1;havoc processEnvironment_#t~ret42#1; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L290 TraceCheckUtils]: 31: Hoare triple {1661#false} assume 0 != processEnvironment_~tmp~7#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L290 TraceCheckUtils]: 32: Hoare triple {1661#false} assume { :end_inline_deactivatePump } true; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L290 TraceCheckUtils]: 33: Hoare triple {1661#false} assume { :end_inline_processEnvironment } true; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L290 TraceCheckUtils]: 34: Hoare triple {1661#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L290 TraceCheckUtils]: 35: Hoare triple {1661#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L290 TraceCheckUtils]: 36: Hoare triple {1661#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {1661#false} is VALID [2022-02-20 18:12:48,093 INFO L272 TraceCheckUtils]: 37: Hoare triple {1661#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {1660#true} is VALID [2022-02-20 18:12:48,094 INFO L290 TraceCheckUtils]: 38: Hoare triple {1660#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1660#true} is VALID [2022-02-20 18:12:48,094 INFO L290 TraceCheckUtils]: 39: Hoare triple {1660#true} assume true; {1660#true} is VALID [2022-02-20 18:12:48,094 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {1660#true} {1661#false} #257#return; {1661#false} is VALID [2022-02-20 18:12:48,094 INFO L290 TraceCheckUtils]: 41: Hoare triple {1661#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {1661#false} is VALID [2022-02-20 18:12:48,094 INFO L290 TraceCheckUtils]: 42: Hoare triple {1661#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {1661#false} is VALID [2022-02-20 18:12:48,094 INFO L290 TraceCheckUtils]: 43: Hoare triple {1661#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1661#false} is VALID [2022-02-20 18:12:48,094 INFO L290 TraceCheckUtils]: 44: Hoare triple {1661#false} assume !false; {1661#false} is VALID [2022-02-20 18:12:48,095 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:48,095 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:48,095 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [921997306] [2022-02-20 18:12:48,095 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [921997306] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:48,095 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:48,095 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:48,096 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206891354] [2022-02-20 18:12:48,096 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:48,096 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:12:48,096 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:48,097 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:48,130 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:48,131 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:48,131 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:48,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:48,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:48,133 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:48,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:48,257 INFO L93 Difference]: Finished difference Result 196 states and 255 transitions. [2022-02-20 18:12:48,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:48,257 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:12:48,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:48,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:48,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 255 transitions. [2022-02-20 18:12:48,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:48,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 255 transitions. [2022-02-20 18:12:48,267 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 255 transitions. [2022-02-20 18:12:48,459 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 255 edges. 255 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:48,463 INFO L225 Difference]: With dead ends: 196 [2022-02-20 18:12:48,463 INFO L226 Difference]: Without dead ends: 126 [2022-02-20 18:12:48,463 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:48,464 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 59 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:48,465 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [59 Valid, 174 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:48,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2022-02-20 18:12:48,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 124. [2022-02-20 18:12:48,473 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:48,473 INFO L82 GeneralOperation]: Start isEquivalent. First operand 126 states. Second operand has 124 states, 97 states have (on average 1.288659793814433) internal successors, (125), 105 states have internal predecessors, (125), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-02-20 18:12:48,474 INFO L74 IsIncluded]: Start isIncluded. First operand 126 states. Second operand has 124 states, 97 states have (on average 1.288659793814433) internal successors, (125), 105 states have internal predecessors, (125), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-02-20 18:12:48,474 INFO L87 Difference]: Start difference. First operand 126 states. Second operand has 124 states, 97 states have (on average 1.288659793814433) internal successors, (125), 105 states have internal predecessors, (125), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-02-20 18:12:48,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:48,479 INFO L93 Difference]: Finished difference Result 126 states and 158 transitions. [2022-02-20 18:12:48,479 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 158 transitions. [2022-02-20 18:12:48,479 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:48,479 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:48,480 INFO L74 IsIncluded]: Start isIncluded. First operand has 124 states, 97 states have (on average 1.288659793814433) internal successors, (125), 105 states have internal predecessors, (125), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) Second operand 126 states. [2022-02-20 18:12:48,480 INFO L87 Difference]: Start difference. First operand has 124 states, 97 states have (on average 1.288659793814433) internal successors, (125), 105 states have internal predecessors, (125), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) Second operand 126 states. [2022-02-20 18:12:48,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:48,484 INFO L93 Difference]: Finished difference Result 126 states and 158 transitions. [2022-02-20 18:12:48,485 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 158 transitions. [2022-02-20 18:12:48,485 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:48,485 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:48,485 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:48,485 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:48,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 97 states have (on average 1.288659793814433) internal successors, (125), 105 states have internal predecessors, (125), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-02-20 18:12:48,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 157 transitions. [2022-02-20 18:12:48,490 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 157 transitions. Word has length 45 [2022-02-20 18:12:48,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:48,490 INFO L470 AbstractCegarLoop]: Abstraction has 124 states and 157 transitions. [2022-02-20 18:12:48,491 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:48,491 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 157 transitions. [2022-02-20 18:12:48,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-02-20 18:12:48,491 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:48,492 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:48,492 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:12:48,492 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:48,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:48,492 INFO L85 PathProgramCache]: Analyzing trace with hash 816783697, now seen corresponding path program 1 times [2022-02-20 18:12:48,492 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:48,493 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [426396346] [2022-02-20 18:12:48,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:48,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:48,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:48,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,555 INFO L290 TraceCheckUtils]: 0: Hoare triple {2377#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {2377#true} is VALID [2022-02-20 18:12:48,555 INFO L290 TraceCheckUtils]: 1: Hoare triple {2377#true} assume true; {2377#true} is VALID [2022-02-20 18:12:48,555 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2377#true} {2379#(= ~pumpRunning~0 0)} #251#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:48,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:12:48,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,573 INFO L290 TraceCheckUtils]: 0: Hoare triple {2377#true} assume true; {2377#true} is VALID [2022-02-20 18:12:48,574 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {2377#true} {2379#(= ~pumpRunning~0 0)} #271#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,574 INFO L290 TraceCheckUtils]: 0: Hoare triple {2401#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {2377#true} is VALID [2022-02-20 18:12:48,574 INFO L290 TraceCheckUtils]: 1: Hoare triple {2377#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,575 INFO L290 TraceCheckUtils]: 2: Hoare triple {2379#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,575 INFO L290 TraceCheckUtils]: 3: Hoare triple {2379#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,575 INFO L290 TraceCheckUtils]: 4: Hoare triple {2379#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,576 INFO L290 TraceCheckUtils]: 5: Hoare triple {2379#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,576 INFO L290 TraceCheckUtils]: 6: Hoare triple {2379#(= ~pumpRunning~0 0)} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,577 INFO L290 TraceCheckUtils]: 7: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~6#1); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,577 INFO L272 TraceCheckUtils]: 8: Hoare triple {2379#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {2377#true} is VALID [2022-02-20 18:12:48,577 INFO L290 TraceCheckUtils]: 9: Hoare triple {2377#true} assume true; {2377#true} is VALID [2022-02-20 18:12:48,577 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2377#true} {2379#(= ~pumpRunning~0 0)} #271#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,578 INFO L290 TraceCheckUtils]: 11: Hoare triple {2379#(= ~pumpRunning~0 0)} assume true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,578 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {2379#(= ~pumpRunning~0 0)} {2379#(= ~pumpRunning~0 0)} #255#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-02-20 18:12:48,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:48,588 INFO L290 TraceCheckUtils]: 0: Hoare triple {2377#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:48,588 INFO L290 TraceCheckUtils]: 1: Hoare triple {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:48,589 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} {2379#(= ~pumpRunning~0 0)} #257#return; {2399#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret36#1|)} is VALID [2022-02-20 18:12:48,589 INFO L290 TraceCheckUtils]: 0: Hoare triple {2377#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,590 INFO L290 TraceCheckUtils]: 1: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,590 INFO L290 TraceCheckUtils]: 2: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,590 INFO L290 TraceCheckUtils]: 3: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,591 INFO L290 TraceCheckUtils]: 4: Hoare triple {2379#(= ~pumpRunning~0 0)} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,591 INFO L290 TraceCheckUtils]: 5: Hoare triple {2379#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,591 INFO L290 TraceCheckUtils]: 6: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,592 INFO L290 TraceCheckUtils]: 7: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,592 INFO L290 TraceCheckUtils]: 8: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !false; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,592 INFO L290 TraceCheckUtils]: 9: Hoare triple {2379#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,593 INFO L290 TraceCheckUtils]: 10: Hoare triple {2379#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,593 INFO L290 TraceCheckUtils]: 11: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,593 INFO L290 TraceCheckUtils]: 12: Hoare triple {2379#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,594 INFO L290 TraceCheckUtils]: 13: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~1#1); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,594 INFO L290 TraceCheckUtils]: 14: Hoare triple {2379#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,594 INFO L290 TraceCheckUtils]: 15: Hoare triple {2379#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,595 INFO L272 TraceCheckUtils]: 16: Hoare triple {2379#(= ~pumpRunning~0 0)} call timeShift(); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,595 INFO L290 TraceCheckUtils]: 17: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,595 INFO L272 TraceCheckUtils]: 18: Hoare triple {2379#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {2377#true} is VALID [2022-02-20 18:12:48,595 INFO L290 TraceCheckUtils]: 19: Hoare triple {2377#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {2377#true} is VALID [2022-02-20 18:12:48,596 INFO L290 TraceCheckUtils]: 20: Hoare triple {2377#true} assume true; {2377#true} is VALID [2022-02-20 18:12:48,596 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {2377#true} {2379#(= ~pumpRunning~0 0)} #251#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,596 INFO L290 TraceCheckUtils]: 22: Hoare triple {2379#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,597 INFO L290 TraceCheckUtils]: 23: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,597 INFO L290 TraceCheckUtils]: 24: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,598 INFO L290 TraceCheckUtils]: 25: Hoare triple {2379#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,598 INFO L290 TraceCheckUtils]: 26: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,598 INFO L272 TraceCheckUtils]: 27: Hoare triple {2379#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {2401#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:48,599 INFO L290 TraceCheckUtils]: 28: Hoare triple {2401#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {2377#true} is VALID [2022-02-20 18:12:48,599 INFO L290 TraceCheckUtils]: 29: Hoare triple {2377#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,599 INFO L290 TraceCheckUtils]: 30: Hoare triple {2379#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,600 INFO L290 TraceCheckUtils]: 31: Hoare triple {2379#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,600 INFO L290 TraceCheckUtils]: 32: Hoare triple {2379#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,600 INFO L290 TraceCheckUtils]: 33: Hoare triple {2379#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,601 INFO L290 TraceCheckUtils]: 34: Hoare triple {2379#(= ~pumpRunning~0 0)} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,601 INFO L290 TraceCheckUtils]: 35: Hoare triple {2379#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~6#1); {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,601 INFO L272 TraceCheckUtils]: 36: Hoare triple {2379#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {2377#true} is VALID [2022-02-20 18:12:48,601 INFO L290 TraceCheckUtils]: 37: Hoare triple {2377#true} assume true; {2377#true} is VALID [2022-02-20 18:12:48,602 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {2377#true} {2379#(= ~pumpRunning~0 0)} #271#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,602 INFO L290 TraceCheckUtils]: 39: Hoare triple {2379#(= ~pumpRunning~0 0)} assume true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,602 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {2379#(= ~pumpRunning~0 0)} {2379#(= ~pumpRunning~0 0)} #255#return; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,603 INFO L290 TraceCheckUtils]: 41: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,603 INFO L290 TraceCheckUtils]: 42: Hoare triple {2379#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,604 INFO L290 TraceCheckUtils]: 43: Hoare triple {2379#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,604 INFO L290 TraceCheckUtils]: 44: Hoare triple {2379#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {2379#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:48,604 INFO L272 TraceCheckUtils]: 45: Hoare triple {2379#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {2377#true} is VALID [2022-02-20 18:12:48,604 INFO L290 TraceCheckUtils]: 46: Hoare triple {2377#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:48,605 INFO L290 TraceCheckUtils]: 47: Hoare triple {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:48,605 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {2404#(= ~pumpRunning~0 |isPumpRunning_#res|)} {2379#(= ~pumpRunning~0 0)} #257#return; {2399#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret36#1|)} is VALID [2022-02-20 18:12:48,606 INFO L290 TraceCheckUtils]: 49: Hoare triple {2399#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret36#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {2400#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:48,606 INFO L290 TraceCheckUtils]: 50: Hoare triple {2400#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {2378#false} is VALID [2022-02-20 18:12:48,606 INFO L290 TraceCheckUtils]: 51: Hoare triple {2378#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {2378#false} is VALID [2022-02-20 18:12:48,606 INFO L290 TraceCheckUtils]: 52: Hoare triple {2378#false} assume !false; {2378#false} is VALID [2022-02-20 18:12:48,607 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:12:48,607 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:48,607 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [426396346] [2022-02-20 18:12:48,607 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [426396346] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:48,607 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:48,607 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:12:48,607 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [751730395] [2022-02-20 18:12:48,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:48,608 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2022-02-20 18:12:48,608 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:48,608 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:48,650 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:48,650 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:12:48,651 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:48,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:12:48,651 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:48,652 INFO L87 Difference]: Start difference. First operand 124 states and 157 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:49,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:49,315 INFO L93 Difference]: Finished difference Result 276 states and 351 transitions. [2022-02-20 18:12:49,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-20 18:12:49,315 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2022-02-20 18:12:49,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:49,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:49,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 293 transitions. [2022-02-20 18:12:49,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:49,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 293 transitions. [2022-02-20 18:12:49,326 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 293 transitions. [2022-02-20 18:12:49,582 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 293 edges. 293 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:49,586 INFO L225 Difference]: With dead ends: 276 [2022-02-20 18:12:49,587 INFO L226 Difference]: Without dead ends: 160 [2022-02-20 18:12:49,587 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:49,588 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 119 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 459 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:49,589 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 459 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:49,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-02-20 18:12:49,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 146. [2022-02-20 18:12:49,612 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:49,612 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 146 states, 114 states have (on average 1.263157894736842) internal successors, (144), 122 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:49,613 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 146 states, 114 states have (on average 1.263157894736842) internal successors, (144), 122 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:49,613 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 146 states, 114 states have (on average 1.263157894736842) internal successors, (144), 122 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:49,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:49,618 INFO L93 Difference]: Finished difference Result 160 states and 198 transitions. [2022-02-20 18:12:49,618 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 198 transitions. [2022-02-20 18:12:49,619 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:49,619 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:49,619 INFO L74 IsIncluded]: Start isIncluded. First operand has 146 states, 114 states have (on average 1.263157894736842) internal successors, (144), 122 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) Second operand 160 states. [2022-02-20 18:12:49,620 INFO L87 Difference]: Start difference. First operand has 146 states, 114 states have (on average 1.263157894736842) internal successors, (144), 122 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) Second operand 160 states. [2022-02-20 18:12:49,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:49,625 INFO L93 Difference]: Finished difference Result 160 states and 198 transitions. [2022-02-20 18:12:49,625 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 198 transitions. [2022-02-20 18:12:49,625 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:49,625 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:49,625 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:49,626 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:49,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 114 states have (on average 1.263157894736842) internal successors, (144), 122 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:49,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 183 transitions. [2022-02-20 18:12:49,631 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 183 transitions. Word has length 53 [2022-02-20 18:12:49,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:49,631 INFO L470 AbstractCegarLoop]: Abstraction has 146 states and 183 transitions. [2022-02-20 18:12:49,631 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:49,632 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 183 transitions. [2022-02-20 18:12:49,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:49,632 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:49,632 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:49,632 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:12:49,633 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:49,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:49,633 INFO L85 PathProgramCache]: Analyzing trace with hash 1305099847, now seen corresponding path program 1 times [2022-02-20 18:12:49,633 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:49,633 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078107576] [2022-02-20 18:12:49,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:49,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:49,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:49,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:49,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:49,682 INFO L290 TraceCheckUtils]: 0: Hoare triple {3337#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3337#true} is VALID [2022-02-20 18:12:49,682 INFO L290 TraceCheckUtils]: 1: Hoare triple {3337#true} assume true; {3337#true} is VALID [2022-02-20 18:12:49,682 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3337#true} {3337#true} #251#return; {3337#true} is VALID [2022-02-20 18:12:49,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:49,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:49,718 INFO L290 TraceCheckUtils]: 0: Hoare triple {3360#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {3337#true} is VALID [2022-02-20 18:12:49,718 INFO L290 TraceCheckUtils]: 1: Hoare triple {3337#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {3337#true} is VALID [2022-02-20 18:12:49,718 INFO L290 TraceCheckUtils]: 2: Hoare triple {3337#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {3337#true} is VALID [2022-02-20 18:12:49,718 INFO L290 TraceCheckUtils]: 3: Hoare triple {3337#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {3337#true} is VALID [2022-02-20 18:12:49,719 INFO L290 TraceCheckUtils]: 4: Hoare triple {3337#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {3361#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:12:49,719 INFO L290 TraceCheckUtils]: 5: Hoare triple {3361#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {3362#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:49,720 INFO L290 TraceCheckUtils]: 6: Hoare triple {3362#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {3363#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} is VALID [2022-02-20 18:12:49,724 INFO L290 TraceCheckUtils]: 7: Hoare triple {3363#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {3338#false} is VALID [2022-02-20 18:12:49,724 INFO L290 TraceCheckUtils]: 8: Hoare triple {3338#false} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {3338#false} is VALID [2022-02-20 18:12:49,724 INFO L290 TraceCheckUtils]: 9: Hoare triple {3338#false} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {3338#false} is VALID [2022-02-20 18:12:49,724 INFO L290 TraceCheckUtils]: 10: Hoare triple {3338#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {3338#false} is VALID [2022-02-20 18:12:49,724 INFO L290 TraceCheckUtils]: 11: Hoare triple {3338#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {3338#false} is VALID [2022-02-20 18:12:49,725 INFO L290 TraceCheckUtils]: 12: Hoare triple {3338#false} assume { :end_inline_activatePump } true; {3338#false} is VALID [2022-02-20 18:12:49,725 INFO L290 TraceCheckUtils]: 13: Hoare triple {3338#false} assume true; {3338#false} is VALID [2022-02-20 18:12:49,725 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {3338#false} {3337#true} #255#return; {3338#false} is VALID [2022-02-20 18:12:49,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:49,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:49,729 INFO L290 TraceCheckUtils]: 0: Hoare triple {3337#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3337#true} is VALID [2022-02-20 18:12:49,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {3337#true} assume true; {3337#true} is VALID [2022-02-20 18:12:49,729 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3337#true} {3338#false} #257#return; {3338#false} is VALID [2022-02-20 18:12:49,729 INFO L290 TraceCheckUtils]: 0: Hoare triple {3337#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {3337#true} is VALID [2022-02-20 18:12:49,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {3337#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {3337#true} is VALID [2022-02-20 18:12:49,729 INFO L290 TraceCheckUtils]: 2: Hoare triple {3337#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3337#true} is VALID [2022-02-20 18:12:49,730 INFO L290 TraceCheckUtils]: 3: Hoare triple {3337#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {3337#true} is VALID [2022-02-20 18:12:49,730 INFO L290 TraceCheckUtils]: 4: Hoare triple {3337#true} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {3337#true} is VALID [2022-02-20 18:12:49,730 INFO L290 TraceCheckUtils]: 5: Hoare triple {3337#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {3337#true} is VALID [2022-02-20 18:12:49,730 INFO L290 TraceCheckUtils]: 6: Hoare triple {3337#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {3337#true} is VALID [2022-02-20 18:12:49,731 INFO L290 TraceCheckUtils]: 7: Hoare triple {3337#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3337#true} is VALID [2022-02-20 18:12:49,731 INFO L290 TraceCheckUtils]: 8: Hoare triple {3337#true} assume !false; {3337#true} is VALID [2022-02-20 18:12:49,731 INFO L290 TraceCheckUtils]: 9: Hoare triple {3337#true} assume test_~splverifierCounter~0#1 < 4; {3337#true} is VALID [2022-02-20 18:12:49,731 INFO L290 TraceCheckUtils]: 10: Hoare triple {3337#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {3337#true} is VALID [2022-02-20 18:12:49,731 INFO L290 TraceCheckUtils]: 11: Hoare triple {3337#true} assume !(0 != test_~tmp~5#1); {3337#true} is VALID [2022-02-20 18:12:49,731 INFO L290 TraceCheckUtils]: 12: Hoare triple {3337#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L290 TraceCheckUtils]: 13: Hoare triple {3337#true} assume !(0 != test_~tmp___0~1#1); {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L290 TraceCheckUtils]: 14: Hoare triple {3337#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L290 TraceCheckUtils]: 15: Hoare triple {3337#true} assume 0 != test_~tmp___2~0#1; {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L272 TraceCheckUtils]: 16: Hoare triple {3337#true} call timeShift(); {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L290 TraceCheckUtils]: 17: Hoare triple {3337#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L272 TraceCheckUtils]: 18: Hoare triple {3337#true} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L290 TraceCheckUtils]: 19: Hoare triple {3337#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3337#true} is VALID [2022-02-20 18:12:49,732 INFO L290 TraceCheckUtils]: 20: Hoare triple {3337#true} assume true; {3337#true} is VALID [2022-02-20 18:12:49,733 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3337#true} {3337#true} #251#return; {3337#true} is VALID [2022-02-20 18:12:49,733 INFO L290 TraceCheckUtils]: 22: Hoare triple {3337#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {3337#true} is VALID [2022-02-20 18:12:49,733 INFO L290 TraceCheckUtils]: 23: Hoare triple {3337#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {3337#true} is VALID [2022-02-20 18:12:49,733 INFO L290 TraceCheckUtils]: 24: Hoare triple {3337#true} assume !(0 != ~pumpRunning~0); {3337#true} is VALID [2022-02-20 18:12:49,733 INFO L290 TraceCheckUtils]: 25: Hoare triple {3337#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {3337#true} is VALID [2022-02-20 18:12:49,733 INFO L290 TraceCheckUtils]: 26: Hoare triple {3337#true} assume !(0 != ~pumpRunning~0); {3337#true} is VALID [2022-02-20 18:12:49,734 INFO L272 TraceCheckUtils]: 27: Hoare triple {3337#true} call processEnvironment__wrappee__highWaterSensor(); {3360#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:49,734 INFO L290 TraceCheckUtils]: 28: Hoare triple {3360#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {3337#true} is VALID [2022-02-20 18:12:49,734 INFO L290 TraceCheckUtils]: 29: Hoare triple {3337#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {3337#true} is VALID [2022-02-20 18:12:49,734 INFO L290 TraceCheckUtils]: 30: Hoare triple {3337#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {3337#true} is VALID [2022-02-20 18:12:49,734 INFO L290 TraceCheckUtils]: 31: Hoare triple {3337#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {3337#true} is VALID [2022-02-20 18:12:49,734 INFO L290 TraceCheckUtils]: 32: Hoare triple {3337#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {3361#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:12:49,735 INFO L290 TraceCheckUtils]: 33: Hoare triple {3361#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {3362#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:49,735 INFO L290 TraceCheckUtils]: 34: Hoare triple {3362#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {3363#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} is VALID [2022-02-20 18:12:49,736 INFO L290 TraceCheckUtils]: 35: Hoare triple {3363#(= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {3338#false} is VALID [2022-02-20 18:12:49,736 INFO L290 TraceCheckUtils]: 36: Hoare triple {3338#false} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {3338#false} is VALID [2022-02-20 18:12:49,736 INFO L290 TraceCheckUtils]: 37: Hoare triple {3338#false} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {3338#false} is VALID [2022-02-20 18:12:49,737 INFO L290 TraceCheckUtils]: 38: Hoare triple {3338#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {3338#false} is VALID [2022-02-20 18:12:49,737 INFO L290 TraceCheckUtils]: 39: Hoare triple {3338#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {3338#false} is VALID [2022-02-20 18:12:49,737 INFO L290 TraceCheckUtils]: 40: Hoare triple {3338#false} assume { :end_inline_activatePump } true; {3338#false} is VALID [2022-02-20 18:12:49,737 INFO L290 TraceCheckUtils]: 41: Hoare triple {3338#false} assume true; {3338#false} is VALID [2022-02-20 18:12:49,738 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {3338#false} {3337#true} #255#return; {3338#false} is VALID [2022-02-20 18:12:49,738 INFO L290 TraceCheckUtils]: 43: Hoare triple {3338#false} assume { :end_inline_processEnvironment } true; {3338#false} is VALID [2022-02-20 18:12:49,738 INFO L290 TraceCheckUtils]: 44: Hoare triple {3338#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {3338#false} is VALID [2022-02-20 18:12:49,738 INFO L290 TraceCheckUtils]: 45: Hoare triple {3338#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {3338#false} is VALID [2022-02-20 18:12:49,738 INFO L290 TraceCheckUtils]: 46: Hoare triple {3338#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {3338#false} is VALID [2022-02-20 18:12:49,738 INFO L272 TraceCheckUtils]: 47: Hoare triple {3338#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {3337#true} is VALID [2022-02-20 18:12:49,738 INFO L290 TraceCheckUtils]: 48: Hoare triple {3337#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3337#true} is VALID [2022-02-20 18:12:49,738 INFO L290 TraceCheckUtils]: 49: Hoare triple {3337#true} assume true; {3337#true} is VALID [2022-02-20 18:12:49,739 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {3337#true} {3338#false} #257#return; {3338#false} is VALID [2022-02-20 18:12:49,739 INFO L290 TraceCheckUtils]: 51: Hoare triple {3338#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {3338#false} is VALID [2022-02-20 18:12:49,739 INFO L290 TraceCheckUtils]: 52: Hoare triple {3338#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {3338#false} is VALID [2022-02-20 18:12:49,739 INFO L290 TraceCheckUtils]: 53: Hoare triple {3338#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {3338#false} is VALID [2022-02-20 18:12:49,739 INFO L290 TraceCheckUtils]: 54: Hoare triple {3338#false} assume !false; {3338#false} is VALID [2022-02-20 18:12:49,741 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:49,741 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:49,741 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078107576] [2022-02-20 18:12:49,741 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078107576] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:49,741 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:49,741 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:49,741 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385075691] [2022-02-20 18:12:49,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:49,742 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:49,742 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:49,742 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:49,779 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:49,779 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:49,779 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:49,779 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:49,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:49,780 INFO L87 Difference]: Start difference. First operand 146 states and 183 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:50,205 INFO L93 Difference]: Finished difference Result 294 states and 379 transitions. [2022-02-20 18:12:50,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:50,205 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:50,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:50,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 225 transitions. [2022-02-20 18:12:50,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 225 transitions. [2022-02-20 18:12:50,212 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 225 transitions. [2022-02-20 18:12:50,409 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:50,412 INFO L225 Difference]: With dead ends: 294 [2022-02-20 18:12:50,413 INFO L226 Difference]: Without dead ends: 156 [2022-02-20 18:12:50,413 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:50,414 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 71 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:50,414 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 363 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:50,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-02-20 18:12:50,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 149. [2022-02-20 18:12:50,425 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:50,425 INFO L82 GeneralOperation]: Start isEquivalent. First operand 156 states. Second operand has 149 states, 117 states have (on average 1.2564102564102564) internal successors, (147), 125 states have internal predecessors, (147), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:50,426 INFO L74 IsIncluded]: Start isIncluded. First operand 156 states. Second operand has 149 states, 117 states have (on average 1.2564102564102564) internal successors, (147), 125 states have internal predecessors, (147), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:50,426 INFO L87 Difference]: Start difference. First operand 156 states. Second operand has 149 states, 117 states have (on average 1.2564102564102564) internal successors, (147), 125 states have internal predecessors, (147), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:50,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:50,431 INFO L93 Difference]: Finished difference Result 156 states and 195 transitions. [2022-02-20 18:12:50,431 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 195 transitions. [2022-02-20 18:12:50,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:50,431 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:50,432 INFO L74 IsIncluded]: Start isIncluded. First operand has 149 states, 117 states have (on average 1.2564102564102564) internal successors, (147), 125 states have internal predecessors, (147), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) Second operand 156 states. [2022-02-20 18:12:50,432 INFO L87 Difference]: Start difference. First operand has 149 states, 117 states have (on average 1.2564102564102564) internal successors, (147), 125 states have internal predecessors, (147), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) Second operand 156 states. [2022-02-20 18:12:50,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:50,450 INFO L93 Difference]: Finished difference Result 156 states and 195 transitions. [2022-02-20 18:12:50,450 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 195 transitions. [2022-02-20 18:12:50,451 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:50,451 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:50,451 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:50,451 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:50,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 117 states have (on average 1.2564102564102564) internal successors, (147), 125 states have internal predecessors, (147), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:50,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 186 transitions. [2022-02-20 18:12:50,459 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 186 transitions. Word has length 55 [2022-02-20 18:12:50,459 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:50,459 INFO L470 AbstractCegarLoop]: Abstraction has 149 states and 186 transitions. [2022-02-20 18:12:50,459 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,459 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 186 transitions. [2022-02-20 18:12:50,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:50,461 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:50,461 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:50,461 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:12:50,461 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:50,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:50,462 INFO L85 PathProgramCache]: Analyzing trace with hash -500338487, now seen corresponding path program 1 times [2022-02-20 18:12:50,462 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:50,462 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [692310622] [2022-02-20 18:12:50,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:50,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:50,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:50,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:50,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:50,531 INFO L290 TraceCheckUtils]: 0: Hoare triple {4307#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {4307#true} is VALID [2022-02-20 18:12:50,531 INFO L290 TraceCheckUtils]: 1: Hoare triple {4307#true} assume true; {4307#true} is VALID [2022-02-20 18:12:50,531 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4307#true} {4307#true} #251#return; {4307#true} is VALID [2022-02-20 18:12:50,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:50,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:50,559 INFO L290 TraceCheckUtils]: 0: Hoare triple {4330#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {4307#true} is VALID [2022-02-20 18:12:50,559 INFO L290 TraceCheckUtils]: 1: Hoare triple {4307#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {4307#true} is VALID [2022-02-20 18:12:50,559 INFO L290 TraceCheckUtils]: 2: Hoare triple {4307#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {4331#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:12:50,560 INFO L290 TraceCheckUtils]: 3: Hoare triple {4331#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {4332#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|) 0)} is VALID [2022-02-20 18:12:50,560 INFO L290 TraceCheckUtils]: 4: Hoare triple {4332#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {4308#false} is VALID [2022-02-20 18:12:50,560 INFO L290 TraceCheckUtils]: 5: Hoare triple {4308#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {4308#false} is VALID [2022-02-20 18:12:50,561 INFO L290 TraceCheckUtils]: 6: Hoare triple {4308#false} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {4308#false} is VALID [2022-02-20 18:12:50,566 INFO L290 TraceCheckUtils]: 7: Hoare triple {4308#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {4308#false} is VALID [2022-02-20 18:12:50,566 INFO L290 TraceCheckUtils]: 8: Hoare triple {4308#false} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {4308#false} is VALID [2022-02-20 18:12:50,566 INFO L290 TraceCheckUtils]: 9: Hoare triple {4308#false} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {4308#false} is VALID [2022-02-20 18:12:50,566 INFO L290 TraceCheckUtils]: 10: Hoare triple {4308#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {4308#false} is VALID [2022-02-20 18:12:50,567 INFO L290 TraceCheckUtils]: 11: Hoare triple {4308#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {4308#false} is VALID [2022-02-20 18:12:50,567 INFO L290 TraceCheckUtils]: 12: Hoare triple {4308#false} assume { :end_inline_activatePump } true; {4308#false} is VALID [2022-02-20 18:12:50,567 INFO L290 TraceCheckUtils]: 13: Hoare triple {4308#false} assume true; {4308#false} is VALID [2022-02-20 18:12:50,567 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {4308#false} {4307#true} #255#return; {4308#false} is VALID [2022-02-20 18:12:50,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:50,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:50,571 INFO L290 TraceCheckUtils]: 0: Hoare triple {4307#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 1: Hoare triple {4307#true} assume true; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4307#true} {4308#false} #257#return; {4308#false} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 0: Hoare triple {4307#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 1: Hoare triple {4307#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 2: Hoare triple {4307#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 3: Hoare triple {4307#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 4: Hoare triple {4307#true} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {4307#true} is VALID [2022-02-20 18:12:50,572 INFO L290 TraceCheckUtils]: 5: Hoare triple {4307#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 6: Hoare triple {4307#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 7: Hoare triple {4307#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 8: Hoare triple {4307#true} assume !false; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 9: Hoare triple {4307#true} assume test_~splverifierCounter~0#1 < 4; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 10: Hoare triple {4307#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 11: Hoare triple {4307#true} assume !(0 != test_~tmp~5#1); {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 12: Hoare triple {4307#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {4307#true} is VALID [2022-02-20 18:12:50,573 INFO L290 TraceCheckUtils]: 13: Hoare triple {4307#true} assume !(0 != test_~tmp___0~1#1); {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L290 TraceCheckUtils]: 14: Hoare triple {4307#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L290 TraceCheckUtils]: 15: Hoare triple {4307#true} assume 0 != test_~tmp___2~0#1; {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L272 TraceCheckUtils]: 16: Hoare triple {4307#true} call timeShift(); {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L290 TraceCheckUtils]: 17: Hoare triple {4307#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L272 TraceCheckUtils]: 18: Hoare triple {4307#true} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L290 TraceCheckUtils]: 19: Hoare triple {4307#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L290 TraceCheckUtils]: 20: Hoare triple {4307#true} assume true; {4307#true} is VALID [2022-02-20 18:12:50,574 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {4307#true} {4307#true} #251#return; {4307#true} is VALID [2022-02-20 18:12:50,575 INFO L290 TraceCheckUtils]: 22: Hoare triple {4307#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {4307#true} is VALID [2022-02-20 18:12:50,575 INFO L290 TraceCheckUtils]: 23: Hoare triple {4307#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {4307#true} is VALID [2022-02-20 18:12:50,576 INFO L290 TraceCheckUtils]: 24: Hoare triple {4307#true} assume !(0 != ~pumpRunning~0); {4307#true} is VALID [2022-02-20 18:12:50,577 INFO L290 TraceCheckUtils]: 25: Hoare triple {4307#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {4307#true} is VALID [2022-02-20 18:12:50,580 INFO L290 TraceCheckUtils]: 26: Hoare triple {4307#true} assume !(0 != ~pumpRunning~0); {4307#true} is VALID [2022-02-20 18:12:50,581 INFO L272 TraceCheckUtils]: 27: Hoare triple {4307#true} call processEnvironment__wrappee__highWaterSensor(); {4330#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:50,582 INFO L290 TraceCheckUtils]: 28: Hoare triple {4330#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {4307#true} is VALID [2022-02-20 18:12:50,582 INFO L290 TraceCheckUtils]: 29: Hoare triple {4307#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {4307#true} is VALID [2022-02-20 18:12:50,582 INFO L290 TraceCheckUtils]: 30: Hoare triple {4307#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {4331#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:12:50,583 INFO L290 TraceCheckUtils]: 31: Hoare triple {4331#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {4332#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|) 0)} is VALID [2022-02-20 18:12:50,584 INFO L290 TraceCheckUtils]: 32: Hoare triple {4332#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {4308#false} is VALID [2022-02-20 18:12:50,584 INFO L290 TraceCheckUtils]: 33: Hoare triple {4308#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 34: Hoare triple {4308#false} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 35: Hoare triple {4308#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 36: Hoare triple {4308#false} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 37: Hoare triple {4308#false} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 38: Hoare triple {4308#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 39: Hoare triple {4308#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 40: Hoare triple {4308#false} assume { :end_inline_activatePump } true; {4308#false} is VALID [2022-02-20 18:12:50,585 INFO L290 TraceCheckUtils]: 41: Hoare triple {4308#false} assume true; {4308#false} is VALID [2022-02-20 18:12:50,586 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {4308#false} {4307#true} #255#return; {4308#false} is VALID [2022-02-20 18:12:50,586 INFO L290 TraceCheckUtils]: 43: Hoare triple {4308#false} assume { :end_inline_processEnvironment } true; {4308#false} is VALID [2022-02-20 18:12:50,586 INFO L290 TraceCheckUtils]: 44: Hoare triple {4308#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {4308#false} is VALID [2022-02-20 18:12:50,586 INFO L290 TraceCheckUtils]: 45: Hoare triple {4308#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {4308#false} is VALID [2022-02-20 18:12:50,586 INFO L290 TraceCheckUtils]: 46: Hoare triple {4308#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {4308#false} is VALID [2022-02-20 18:12:50,586 INFO L272 TraceCheckUtils]: 47: Hoare triple {4308#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {4307#true} is VALID [2022-02-20 18:12:50,586 INFO L290 TraceCheckUtils]: 48: Hoare triple {4307#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {4307#true} is VALID [2022-02-20 18:12:50,586 INFO L290 TraceCheckUtils]: 49: Hoare triple {4307#true} assume true; {4307#true} is VALID [2022-02-20 18:12:50,586 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {4307#true} {4308#false} #257#return; {4308#false} is VALID [2022-02-20 18:12:50,587 INFO L290 TraceCheckUtils]: 51: Hoare triple {4308#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {4308#false} is VALID [2022-02-20 18:12:50,587 INFO L290 TraceCheckUtils]: 52: Hoare triple {4308#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {4308#false} is VALID [2022-02-20 18:12:50,587 INFO L290 TraceCheckUtils]: 53: Hoare triple {4308#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {4308#false} is VALID [2022-02-20 18:12:50,587 INFO L290 TraceCheckUtils]: 54: Hoare triple {4308#false} assume !false; {4308#false} is VALID [2022-02-20 18:12:50,587 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:50,588 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:50,588 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [692310622] [2022-02-20 18:12:50,588 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [692310622] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:50,588 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:50,588 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:50,588 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318434700] [2022-02-20 18:12:50,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:50,590 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:50,590 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:50,590 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,626 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:50,627 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:50,627 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:50,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:50,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:50,628 INFO L87 Difference]: Start difference. First operand 149 states and 186 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:50,923 INFO L93 Difference]: Finished difference Result 300 states and 384 transitions. [2022-02-20 18:12:50,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:12:50,923 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:50,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:50,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 224 transitions. [2022-02-20 18:12:50,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:50,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 224 transitions. [2022-02-20 18:12:50,930 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 224 transitions. [2022-02-20 18:12:51,104 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:51,108 INFO L225 Difference]: With dead ends: 300 [2022-02-20 18:12:51,108 INFO L226 Difference]: Without dead ends: 159 [2022-02-20 18:12:51,109 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:51,109 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 73 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:51,110 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 286 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:51,110 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-02-20 18:12:51,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 151. [2022-02-20 18:12:51,118 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:51,118 INFO L82 GeneralOperation]: Start isEquivalent. First operand 159 states. Second operand has 151 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 127 states have internal predecessors, (149), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:51,119 INFO L74 IsIncluded]: Start isIncluded. First operand 159 states. Second operand has 151 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 127 states have internal predecessors, (149), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:51,119 INFO L87 Difference]: Start difference. First operand 159 states. Second operand has 151 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 127 states have internal predecessors, (149), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:51,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:51,123 INFO L93 Difference]: Finished difference Result 159 states and 197 transitions. [2022-02-20 18:12:51,123 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 197 transitions. [2022-02-20 18:12:51,124 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:51,124 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:51,125 INFO L74 IsIncluded]: Start isIncluded. First operand has 151 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 127 states have internal predecessors, (149), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) Second operand 159 states. [2022-02-20 18:12:51,125 INFO L87 Difference]: Start difference. First operand has 151 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 127 states have internal predecessors, (149), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) Second operand 159 states. [2022-02-20 18:12:51,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:51,129 INFO L93 Difference]: Finished difference Result 159 states and 197 transitions. [2022-02-20 18:12:51,129 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 197 transitions. [2022-02-20 18:12:51,130 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:51,130 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:51,130 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:51,130 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:51,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 127 states have internal predecessors, (149), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-02-20 18:12:51,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 188 transitions. [2022-02-20 18:12:51,135 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 188 transitions. Word has length 55 [2022-02-20 18:12:51,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:51,135 INFO L470 AbstractCegarLoop]: Abstraction has 151 states and 188 transitions. [2022-02-20 18:12:51,135 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:51,136 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 188 transitions. [2022-02-20 18:12:51,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:51,136 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:51,136 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:51,137 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:12:51,137 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:51,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:51,137 INFO L85 PathProgramCache]: Analyzing trace with hash -359789877, now seen corresponding path program 1 times [2022-02-20 18:12:51,138 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:51,138 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [413833538] [2022-02-20 18:12:51,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:51,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:51,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:51,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:51,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:51,191 INFO L290 TraceCheckUtils]: 0: Hoare triple {5290#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5290#true} is VALID [2022-02-20 18:12:51,191 INFO L290 TraceCheckUtils]: 1: Hoare triple {5290#true} assume true; {5290#true} is VALID [2022-02-20 18:12:51,192 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5290#true} {5292#(= ~waterLevel~0 1)} #251#return; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:51,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:51,212 INFO L290 TraceCheckUtils]: 0: Hoare triple {5314#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {5290#true} is VALID [2022-02-20 18:12:51,213 INFO L290 TraceCheckUtils]: 1: Hoare triple {5290#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {5290#true} is VALID [2022-02-20 18:12:51,213 INFO L290 TraceCheckUtils]: 2: Hoare triple {5290#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,214 INFO L290 TraceCheckUtils]: 3: Hoare triple {5315#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,214 INFO L290 TraceCheckUtils]: 4: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,214 INFO L290 TraceCheckUtils]: 5: Hoare triple {5315#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,215 INFO L290 TraceCheckUtils]: 6: Hoare triple {5315#(<= 2 ~waterLevel~0)} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,215 INFO L290 TraceCheckUtils]: 7: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,216 INFO L290 TraceCheckUtils]: 8: Hoare triple {5315#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,216 INFO L290 TraceCheckUtils]: 9: Hoare triple {5315#(<= 2 ~waterLevel~0)} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,216 INFO L290 TraceCheckUtils]: 10: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,217 INFO L290 TraceCheckUtils]: 11: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,217 INFO L290 TraceCheckUtils]: 12: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,218 INFO L290 TraceCheckUtils]: 13: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume true; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,218 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {5315#(<= 2 ~waterLevel~0)} {5292#(= ~waterLevel~0 1)} #255#return; {5291#false} is VALID [2022-02-20 18:12:51,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:51,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:51,222 INFO L290 TraceCheckUtils]: 0: Hoare triple {5290#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5290#true} is VALID [2022-02-20 18:12:51,223 INFO L290 TraceCheckUtils]: 1: Hoare triple {5290#true} assume true; {5290#true} is VALID [2022-02-20 18:12:51,223 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5290#true} {5291#false} #257#return; {5291#false} is VALID [2022-02-20 18:12:51,223 INFO L290 TraceCheckUtils]: 0: Hoare triple {5290#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,224 INFO L290 TraceCheckUtils]: 2: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,225 INFO L290 TraceCheckUtils]: 3: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,225 INFO L290 TraceCheckUtils]: 4: Hoare triple {5292#(= ~waterLevel~0 1)} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,225 INFO L290 TraceCheckUtils]: 5: Hoare triple {5292#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,226 INFO L290 TraceCheckUtils]: 6: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,226 INFO L290 TraceCheckUtils]: 7: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,226 INFO L290 TraceCheckUtils]: 8: Hoare triple {5292#(= ~waterLevel~0 1)} assume !false; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,227 INFO L290 TraceCheckUtils]: 9: Hoare triple {5292#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,227 INFO L290 TraceCheckUtils]: 10: Hoare triple {5292#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,228 INFO L290 TraceCheckUtils]: 11: Hoare triple {5292#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~5#1); {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,228 INFO L290 TraceCheckUtils]: 12: Hoare triple {5292#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,228 INFO L290 TraceCheckUtils]: 13: Hoare triple {5292#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~1#1); {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,229 INFO L290 TraceCheckUtils]: 14: Hoare triple {5292#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,229 INFO L290 TraceCheckUtils]: 15: Hoare triple {5292#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,230 INFO L272 TraceCheckUtils]: 16: Hoare triple {5292#(= ~waterLevel~0 1)} call timeShift(); {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,230 INFO L290 TraceCheckUtils]: 17: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,230 INFO L272 TraceCheckUtils]: 18: Hoare triple {5292#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {5290#true} is VALID [2022-02-20 18:12:51,230 INFO L290 TraceCheckUtils]: 19: Hoare triple {5290#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5290#true} is VALID [2022-02-20 18:12:51,231 INFO L290 TraceCheckUtils]: 20: Hoare triple {5290#true} assume true; {5290#true} is VALID [2022-02-20 18:12:51,231 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5290#true} {5292#(= ~waterLevel~0 1)} #251#return; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,232 INFO L290 TraceCheckUtils]: 22: Hoare triple {5292#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,232 INFO L290 TraceCheckUtils]: 23: Hoare triple {5292#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,232 INFO L290 TraceCheckUtils]: 24: Hoare triple {5292#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,233 INFO L290 TraceCheckUtils]: 25: Hoare triple {5292#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,233 INFO L290 TraceCheckUtils]: 26: Hoare triple {5292#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {5292#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:51,234 INFO L272 TraceCheckUtils]: 27: Hoare triple {5292#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {5314#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:51,234 INFO L290 TraceCheckUtils]: 28: Hoare triple {5314#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {5290#true} is VALID [2022-02-20 18:12:51,234 INFO L290 TraceCheckUtils]: 29: Hoare triple {5290#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {5290#true} is VALID [2022-02-20 18:12:51,234 INFO L290 TraceCheckUtils]: 30: Hoare triple {5290#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,235 INFO L290 TraceCheckUtils]: 31: Hoare triple {5315#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,235 INFO L290 TraceCheckUtils]: 32: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,236 INFO L290 TraceCheckUtils]: 33: Hoare triple {5315#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,236 INFO L290 TraceCheckUtils]: 34: Hoare triple {5315#(<= 2 ~waterLevel~0)} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,236 INFO L290 TraceCheckUtils]: 35: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,237 INFO L290 TraceCheckUtils]: 36: Hoare triple {5315#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,238 INFO L290 TraceCheckUtils]: 37: Hoare triple {5315#(<= 2 ~waterLevel~0)} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,238 INFO L290 TraceCheckUtils]: 38: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,238 INFO L290 TraceCheckUtils]: 39: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,239 INFO L290 TraceCheckUtils]: 40: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,239 INFO L290 TraceCheckUtils]: 41: Hoare triple {5315#(<= 2 ~waterLevel~0)} assume true; {5315#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:51,240 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {5315#(<= 2 ~waterLevel~0)} {5292#(= ~waterLevel~0 1)} #255#return; {5291#false} is VALID [2022-02-20 18:12:51,240 INFO L290 TraceCheckUtils]: 43: Hoare triple {5291#false} assume { :end_inline_processEnvironment } true; {5291#false} is VALID [2022-02-20 18:12:51,240 INFO L290 TraceCheckUtils]: 44: Hoare triple {5291#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {5291#false} is VALID [2022-02-20 18:12:51,240 INFO L290 TraceCheckUtils]: 45: Hoare triple {5291#false} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {5291#false} is VALID [2022-02-20 18:12:51,240 INFO L290 TraceCheckUtils]: 46: Hoare triple {5291#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {5291#false} is VALID [2022-02-20 18:12:51,241 INFO L272 TraceCheckUtils]: 47: Hoare triple {5291#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {5290#true} is VALID [2022-02-20 18:12:51,241 INFO L290 TraceCheckUtils]: 48: Hoare triple {5290#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5290#true} is VALID [2022-02-20 18:12:51,241 INFO L290 TraceCheckUtils]: 49: Hoare triple {5290#true} assume true; {5290#true} is VALID [2022-02-20 18:12:51,241 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {5290#true} {5291#false} #257#return; {5291#false} is VALID [2022-02-20 18:12:51,241 INFO L290 TraceCheckUtils]: 51: Hoare triple {5291#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {5291#false} is VALID [2022-02-20 18:12:51,241 INFO L290 TraceCheckUtils]: 52: Hoare triple {5291#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {5291#false} is VALID [2022-02-20 18:12:51,241 INFO L290 TraceCheckUtils]: 53: Hoare triple {5291#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {5291#false} is VALID [2022-02-20 18:12:51,242 INFO L290 TraceCheckUtils]: 54: Hoare triple {5291#false} assume !false; {5291#false} is VALID [2022-02-20 18:12:51,242 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:51,242 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:51,242 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [413833538] [2022-02-20 18:12:51,243 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [413833538] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:51,243 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:51,243 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:51,243 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [840220940] [2022-02-20 18:12:51,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:51,244 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:51,244 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:51,244 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:51,287 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:51,287 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:51,287 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:51,288 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:51,288 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:51,288 INFO L87 Difference]: Start difference. First operand 151 states and 188 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:51,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:51,931 INFO L93 Difference]: Finished difference Result 423 states and 549 transitions. [2022-02-20 18:12:51,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:51,932 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2022-02-20 18:12:51,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:51,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:51,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 360 transitions. [2022-02-20 18:12:51,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:51,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 360 transitions. [2022-02-20 18:12:51,941 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 360 transitions. [2022-02-20 18:12:52,207 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 360 edges. 360 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:52,215 INFO L225 Difference]: With dead ends: 423 [2022-02-20 18:12:52,215 INFO L226 Difference]: Without dead ends: 280 [2022-02-20 18:12:52,216 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:52,217 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 212 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:52,217 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [219 Valid, 308 Invalid, 209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:52,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2022-02-20 18:12:52,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 278. [2022-02-20 18:12:52,259 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:52,260 INFO L82 GeneralOperation]: Start isEquivalent. First operand 280 states. Second operand has 278 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 226 states have internal predecessors, (262), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-02-20 18:12:52,260 INFO L74 IsIncluded]: Start isIncluded. First operand 280 states. Second operand has 278 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 226 states have internal predecessors, (262), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-02-20 18:12:52,261 INFO L87 Difference]: Start difference. First operand 280 states. Second operand has 278 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 226 states have internal predecessors, (262), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-02-20 18:12:52,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:52,269 INFO L93 Difference]: Finished difference Result 280 states and 350 transitions. [2022-02-20 18:12:52,269 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 350 transitions. [2022-02-20 18:12:52,270 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:52,271 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:52,272 INFO L74 IsIncluded]: Start isIncluded. First operand has 278 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 226 states have internal predecessors, (262), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) Second operand 280 states. [2022-02-20 18:12:52,273 INFO L87 Difference]: Start difference. First operand has 278 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 226 states have internal predecessors, (262), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) Second operand 280 states. [2022-02-20 18:12:52,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:52,281 INFO L93 Difference]: Finished difference Result 280 states and 350 transitions. [2022-02-20 18:12:52,282 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 350 transitions. [2022-02-20 18:12:52,283 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:52,283 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:52,283 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:52,283 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:52,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 226 states have internal predecessors, (262), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-02-20 18:12:52,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 349 transitions. [2022-02-20 18:12:52,293 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 349 transitions. Word has length 55 [2022-02-20 18:12:52,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:52,293 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 349 transitions. [2022-02-20 18:12:52,293 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:52,294 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 349 transitions. [2022-02-20 18:12:52,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-02-20 18:12:52,294 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:52,295 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:52,295 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:12:52,295 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:52,295 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:52,296 INFO L85 PathProgramCache]: Analyzing trace with hash 1504091825, now seen corresponding path program 1 times [2022-02-20 18:12:52,296 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:52,296 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905042208] [2022-02-20 18:12:52,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:52,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:52,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:52,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:52,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:52,410 INFO L290 TraceCheckUtils]: 0: Hoare triple {6895#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,411 INFO L290 TraceCheckUtils]: 1: Hoare triple {6870#(<= ~waterLevel~0 2)} assume true; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,412 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6870#(<= ~waterLevel~0 2)} {6866#(= ~waterLevel~0 1)} #263#return; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:52,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:52,415 INFO L290 TraceCheckUtils]: 0: Hoare triple {6864#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {6864#true} is VALID [2022-02-20 18:12:52,415 INFO L290 TraceCheckUtils]: 1: Hoare triple {6864#true} assume true; {6864#true} is VALID [2022-02-20 18:12:52,416 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6864#true} {6870#(<= ~waterLevel~0 2)} #251#return; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-02-20 18:12:52,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:52,442 INFO L290 TraceCheckUtils]: 0: Hoare triple {6896#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {6864#true} is VALID [2022-02-20 18:12:52,443 INFO L290 TraceCheckUtils]: 1: Hoare triple {6864#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {6864#true} is VALID [2022-02-20 18:12:52,443 INFO L290 TraceCheckUtils]: 2: Hoare triple {6864#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,444 INFO L290 TraceCheckUtils]: 3: Hoare triple {6897#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,444 INFO L290 TraceCheckUtils]: 4: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,445 INFO L290 TraceCheckUtils]: 5: Hoare triple {6897#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,445 INFO L290 TraceCheckUtils]: 6: Hoare triple {6897#(not (<= ~waterLevel~0 1))} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,445 INFO L290 TraceCheckUtils]: 7: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,446 INFO L290 TraceCheckUtils]: 8: Hoare triple {6897#(not (<= ~waterLevel~0 1))} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,446 INFO L290 TraceCheckUtils]: 9: Hoare triple {6897#(not (<= ~waterLevel~0 1))} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,446 INFO L290 TraceCheckUtils]: 10: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,447 INFO L290 TraceCheckUtils]: 11: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,447 INFO L290 TraceCheckUtils]: 12: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,448 INFO L290 TraceCheckUtils]: 13: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume true; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,448 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {6897#(not (<= ~waterLevel~0 1))} {6870#(<= ~waterLevel~0 2)} #255#return; {6889#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:52,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:12:52,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:52,452 INFO L290 TraceCheckUtils]: 0: Hoare triple {6864#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {6864#true} is VALID [2022-02-20 18:12:52,452 INFO L290 TraceCheckUtils]: 1: Hoare triple {6864#true} assume true; {6864#true} is VALID [2022-02-20 18:12:52,452 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6864#true} {6865#false} #257#return; {6865#false} is VALID [2022-02-20 18:12:52,453 INFO L290 TraceCheckUtils]: 0: Hoare triple {6864#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,453 INFO L290 TraceCheckUtils]: 1: Hoare triple {6866#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,454 INFO L290 TraceCheckUtils]: 2: Hoare triple {6866#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,454 INFO L290 TraceCheckUtils]: 3: Hoare triple {6866#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,454 INFO L290 TraceCheckUtils]: 4: Hoare triple {6866#(= ~waterLevel~0 1)} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,455 INFO L290 TraceCheckUtils]: 5: Hoare triple {6866#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,455 INFO L290 TraceCheckUtils]: 6: Hoare triple {6866#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,455 INFO L290 TraceCheckUtils]: 7: Hoare triple {6866#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,456 INFO L290 TraceCheckUtils]: 8: Hoare triple {6866#(= ~waterLevel~0 1)} assume !false; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,456 INFO L290 TraceCheckUtils]: 9: Hoare triple {6866#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,456 INFO L290 TraceCheckUtils]: 10: Hoare triple {6866#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,457 INFO L290 TraceCheckUtils]: 11: Hoare triple {6866#(= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {6866#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:52,457 INFO L272 TraceCheckUtils]: 12: Hoare triple {6866#(= ~waterLevel~0 1)} call waterRise(); {6895#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:52,458 INFO L290 TraceCheckUtils]: 13: Hoare triple {6895#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,458 INFO L290 TraceCheckUtils]: 14: Hoare triple {6870#(<= ~waterLevel~0 2)} assume true; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,459 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6870#(<= ~waterLevel~0 2)} {6866#(= ~waterLevel~0 1)} #263#return; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,459 INFO L290 TraceCheckUtils]: 16: Hoare triple {6870#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,460 INFO L290 TraceCheckUtils]: 17: Hoare triple {6870#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,460 INFO L290 TraceCheckUtils]: 18: Hoare triple {6870#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,460 INFO L290 TraceCheckUtils]: 19: Hoare triple {6870#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,461 INFO L272 TraceCheckUtils]: 20: Hoare triple {6870#(<= ~waterLevel~0 2)} call timeShift(); {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,461 INFO L290 TraceCheckUtils]: 21: Hoare triple {6870#(<= ~waterLevel~0 2)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,461 INFO L272 TraceCheckUtils]: 22: Hoare triple {6870#(<= ~waterLevel~0 2)} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {6864#true} is VALID [2022-02-20 18:12:52,461 INFO L290 TraceCheckUtils]: 23: Hoare triple {6864#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {6864#true} is VALID [2022-02-20 18:12:52,462 INFO L290 TraceCheckUtils]: 24: Hoare triple {6864#true} assume true; {6864#true} is VALID [2022-02-20 18:12:52,462 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {6864#true} {6870#(<= ~waterLevel~0 2)} #251#return; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,462 INFO L290 TraceCheckUtils]: 26: Hoare triple {6870#(<= ~waterLevel~0 2)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,463 INFO L290 TraceCheckUtils]: 27: Hoare triple {6870#(<= ~waterLevel~0 2)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,463 INFO L290 TraceCheckUtils]: 28: Hoare triple {6870#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,464 INFO L290 TraceCheckUtils]: 29: Hoare triple {6870#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,464 INFO L290 TraceCheckUtils]: 30: Hoare triple {6870#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {6870#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:52,464 INFO L272 TraceCheckUtils]: 31: Hoare triple {6870#(<= ~waterLevel~0 2)} call processEnvironment__wrappee__highWaterSensor(); {6896#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:52,465 INFO L290 TraceCheckUtils]: 32: Hoare triple {6896#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {6864#true} is VALID [2022-02-20 18:12:52,465 INFO L290 TraceCheckUtils]: 33: Hoare triple {6864#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {6864#true} is VALID [2022-02-20 18:12:52,465 INFO L290 TraceCheckUtils]: 34: Hoare triple {6864#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,466 INFO L290 TraceCheckUtils]: 35: Hoare triple {6897#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,466 INFO L290 TraceCheckUtils]: 36: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,466 INFO L290 TraceCheckUtils]: 37: Hoare triple {6897#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,467 INFO L290 TraceCheckUtils]: 38: Hoare triple {6897#(not (<= ~waterLevel~0 1))} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,467 INFO L290 TraceCheckUtils]: 39: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,468 INFO L290 TraceCheckUtils]: 40: Hoare triple {6897#(not (<= ~waterLevel~0 1))} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,468 INFO L290 TraceCheckUtils]: 41: Hoare triple {6897#(not (<= ~waterLevel~0 1))} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,468 INFO L290 TraceCheckUtils]: 42: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,469 INFO L290 TraceCheckUtils]: 43: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,469 INFO L290 TraceCheckUtils]: 44: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,469 INFO L290 TraceCheckUtils]: 45: Hoare triple {6897#(not (<= ~waterLevel~0 1))} assume true; {6897#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:52,470 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {6897#(not (<= ~waterLevel~0 1))} {6870#(<= ~waterLevel~0 2)} #255#return; {6889#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:52,470 INFO L290 TraceCheckUtils]: 47: Hoare triple {6889#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {6889#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:52,471 INFO L290 TraceCheckUtils]: 48: Hoare triple {6889#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {6890#(and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))} is VALID [2022-02-20 18:12:52,471 INFO L290 TraceCheckUtils]: 49: Hoare triple {6890#(and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {6891#(and (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|))} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 50: Hoare triple {6891#(and (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {6865#false} is VALID [2022-02-20 18:12:52,472 INFO L272 TraceCheckUtils]: 51: Hoare triple {6865#false} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {6864#true} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 52: Hoare triple {6864#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {6864#true} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 53: Hoare triple {6864#true} assume true; {6864#true} is VALID [2022-02-20 18:12:52,472 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {6864#true} {6865#false} #257#return; {6865#false} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 55: Hoare triple {6865#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {6865#false} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 56: Hoare triple {6865#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {6865#false} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 57: Hoare triple {6865#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {6865#false} is VALID [2022-02-20 18:12:52,472 INFO L290 TraceCheckUtils]: 58: Hoare triple {6865#false} assume !false; {6865#false} is VALID [2022-02-20 18:12:52,473 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:52,473 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:52,473 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905042208] [2022-02-20 18:12:52,473 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905042208] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:52,473 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:52,473 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:52,473 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887076995] [2022-02-20 18:12:52,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:52,474 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2022-02-20 18:12:52,474 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:52,474 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:52,516 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:52,517 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:52,517 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:52,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:52,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:52,518 INFO L87 Difference]: Start difference. First operand 278 states and 349 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:54,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:54,638 INFO L93 Difference]: Finished difference Result 757 states and 998 transitions. [2022-02-20 18:12:54,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-02-20 18:12:54,639 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2022-02-20 18:12:54,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:54,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:54,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 489 transitions. [2022-02-20 18:12:54,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:54,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 489 transitions. [2022-02-20 18:12:54,651 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 28 states and 489 transitions. [2022-02-20 18:12:55,025 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 489 edges. 489 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:55,045 INFO L225 Difference]: With dead ends: 757 [2022-02-20 18:12:55,045 INFO L226 Difference]: Without dead ends: 537 [2022-02-20 18:12:55,047 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 255 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=250, Invalid=806, Unknown=0, NotChecked=0, Total=1056 [2022-02-20 18:12:55,048 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 515 mSDsluCounter, 494 mSDsCounter, 0 mSdLazyCounter, 547 mSolverCounterSat, 172 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 633 SdHoareTripleChecker+Invalid, 719 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 172 IncrementalHoareTripleChecker+Valid, 547 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:55,048 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [520 Valid, 633 Invalid, 719 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [172 Valid, 547 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-02-20 18:12:55,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2022-02-20 18:12:55,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 433. [2022-02-20 18:12:55,154 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:55,156 INFO L82 GeneralOperation]: Start isEquivalent. First operand 537 states. Second operand has 433 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 356 states have internal predecessors, (406), 51 states have call successors, (51), 39 states have call predecessors, (51), 46 states have return successors, (83), 52 states have call predecessors, (83), 51 states have call successors, (83) [2022-02-20 18:12:55,156 INFO L74 IsIncluded]: Start isIncluded. First operand 537 states. Second operand has 433 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 356 states have internal predecessors, (406), 51 states have call successors, (51), 39 states have call predecessors, (51), 46 states have return successors, (83), 52 states have call predecessors, (83), 51 states have call successors, (83) [2022-02-20 18:12:55,157 INFO L87 Difference]: Start difference. First operand 537 states. Second operand has 433 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 356 states have internal predecessors, (406), 51 states have call successors, (51), 39 states have call predecessors, (51), 46 states have return successors, (83), 52 states have call predecessors, (83), 51 states have call successors, (83) [2022-02-20 18:12:55,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:55,177 INFO L93 Difference]: Finished difference Result 537 states and 673 transitions. [2022-02-20 18:12:55,177 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 673 transitions. [2022-02-20 18:12:55,179 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:55,179 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:55,180 INFO L74 IsIncluded]: Start isIncluded. First operand has 433 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 356 states have internal predecessors, (406), 51 states have call successors, (51), 39 states have call predecessors, (51), 46 states have return successors, (83), 52 states have call predecessors, (83), 51 states have call successors, (83) Second operand 537 states. [2022-02-20 18:12:55,181 INFO L87 Difference]: Start difference. First operand has 433 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 356 states have internal predecessors, (406), 51 states have call successors, (51), 39 states have call predecessors, (51), 46 states have return successors, (83), 52 states have call predecessors, (83), 51 states have call successors, (83) Second operand 537 states. [2022-02-20 18:12:55,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:55,201 INFO L93 Difference]: Finished difference Result 537 states and 673 transitions. [2022-02-20 18:12:55,201 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 673 transitions. [2022-02-20 18:12:55,203 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:55,203 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:55,203 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:55,203 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:55,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 433 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 356 states have internal predecessors, (406), 51 states have call successors, (51), 39 states have call predecessors, (51), 46 states have return successors, (83), 52 states have call predecessors, (83), 51 states have call successors, (83) [2022-02-20 18:12:55,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 433 states to 433 states and 540 transitions. [2022-02-20 18:12:55,220 INFO L78 Accepts]: Start accepts. Automaton has 433 states and 540 transitions. Word has length 59 [2022-02-20 18:12:55,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:55,221 INFO L470 AbstractCegarLoop]: Abstraction has 433 states and 540 transitions. [2022-02-20 18:12:55,221 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:55,221 INFO L276 IsEmpty]: Start isEmpty. Operand 433 states and 540 transitions. [2022-02-20 18:12:55,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-02-20 18:12:55,222 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:55,223 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:55,223 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:12:55,223 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:55,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:55,224 INFO L85 PathProgramCache]: Analyzing trace with hash -808581914, now seen corresponding path program 1 times [2022-02-20 18:12:55,224 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:55,224 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082046014] [2022-02-20 18:12:55,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:55,224 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:55,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:55,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,318 INFO L290 TraceCheckUtils]: 0: Hoare triple {9740#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9684#true} is VALID [2022-02-20 18:12:55,318 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,319 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9684#true} {9684#true} #263#return; {9684#true} is VALID [2022-02-20 18:12:55,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:55,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:55,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,383 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:55,383 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,384 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9684#true} {9684#true} #251#return; {9684#true} is VALID [2022-02-20 18:12:55,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:55,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,401 INFO L290 TraceCheckUtils]: 0: Hoare triple {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:55,401 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:55,401 INFO L290 TraceCheckUtils]: 2: Hoare triple {9684#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:55,402 INFO L290 TraceCheckUtils]: 3: Hoare triple {9684#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {9684#true} is VALID [2022-02-20 18:12:55,402 INFO L290 TraceCheckUtils]: 4: Hoare triple {9684#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9684#true} is VALID [2022-02-20 18:12:55,402 INFO L290 TraceCheckUtils]: 5: Hoare triple {9684#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9684#true} is VALID [2022-02-20 18:12:55,402 INFO L290 TraceCheckUtils]: 6: Hoare triple {9684#true} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {9684#true} is VALID [2022-02-20 18:12:55,402 INFO L290 TraceCheckUtils]: 7: Hoare triple {9684#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {9684#true} is VALID [2022-02-20 18:12:55,402 INFO L290 TraceCheckUtils]: 8: Hoare triple {9684#true} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {9684#true} is VALID [2022-02-20 18:12:55,403 INFO L290 TraceCheckUtils]: 9: Hoare triple {9684#true} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {9684#true} is VALID [2022-02-20 18:12:55,403 INFO L290 TraceCheckUtils]: 10: Hoare triple {9684#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,403 INFO L290 TraceCheckUtils]: 11: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,404 INFO L290 TraceCheckUtils]: 12: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,404 INFO L290 TraceCheckUtils]: 13: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,405 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #255#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,405 INFO L290 TraceCheckUtils]: 0: Hoare triple {9741#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:55,405 INFO L272 TraceCheckUtils]: 1: Hoare triple {9684#true} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:55,405 INFO L290 TraceCheckUtils]: 2: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:55,405 INFO L290 TraceCheckUtils]: 3: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,405 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {9684#true} {9684#true} #251#return; {9684#true} is VALID [2022-02-20 18:12:55,406 INFO L290 TraceCheckUtils]: 5: Hoare triple {9684#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:55,406 INFO L290 TraceCheckUtils]: 6: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9684#true} is VALID [2022-02-20 18:12:55,406 INFO L290 TraceCheckUtils]: 7: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:55,406 INFO L290 TraceCheckUtils]: 8: Hoare triple {9684#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9684#true} is VALID [2022-02-20 18:12:55,406 INFO L290 TraceCheckUtils]: 9: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:55,407 INFO L272 TraceCheckUtils]: 10: Hoare triple {9684#true} call processEnvironment__wrappee__highWaterSensor(); {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:55,407 INFO L290 TraceCheckUtils]: 11: Hoare triple {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:55,407 INFO L290 TraceCheckUtils]: 12: Hoare triple {9684#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:55,407 INFO L290 TraceCheckUtils]: 13: Hoare triple {9684#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:55,407 INFO L290 TraceCheckUtils]: 14: Hoare triple {9684#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {9684#true} is VALID [2022-02-20 18:12:55,407 INFO L290 TraceCheckUtils]: 15: Hoare triple {9684#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9684#true} is VALID [2022-02-20 18:12:55,408 INFO L290 TraceCheckUtils]: 16: Hoare triple {9684#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9684#true} is VALID [2022-02-20 18:12:55,408 INFO L290 TraceCheckUtils]: 17: Hoare triple {9684#true} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {9684#true} is VALID [2022-02-20 18:12:55,408 INFO L290 TraceCheckUtils]: 18: Hoare triple {9684#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {9684#true} is VALID [2022-02-20 18:12:55,408 INFO L290 TraceCheckUtils]: 19: Hoare triple {9684#true} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {9684#true} is VALID [2022-02-20 18:12:55,408 INFO L290 TraceCheckUtils]: 20: Hoare triple {9684#true} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {9684#true} is VALID [2022-02-20 18:12:55,409 INFO L290 TraceCheckUtils]: 21: Hoare triple {9684#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,409 INFO L290 TraceCheckUtils]: 22: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,409 INFO L290 TraceCheckUtils]: 23: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,410 INFO L290 TraceCheckUtils]: 24: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,410 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #255#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,411 INFO L290 TraceCheckUtils]: 26: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,411 INFO L290 TraceCheckUtils]: 27: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,411 INFO L290 TraceCheckUtils]: 28: Hoare triple {9760#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,412 INFO L290 TraceCheckUtils]: 29: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,412 INFO L290 TraceCheckUtils]: 30: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,412 INFO L290 TraceCheckUtils]: 31: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,413 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #267#return; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-02-20 18:12:55,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,425 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:55,425 INFO L290 TraceCheckUtils]: 1: Hoare triple {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:55,426 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} {9724#(not (= ~pumpRunning~0 0))} #251#return; {9728#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1| 0))} is VALID [2022-02-20 18:12:55,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-02-20 18:12:55,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:55,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,433 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,433 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {9684#true} {9684#true} #273#return; {9684#true} is VALID [2022-02-20 18:12:55,433 INFO L290 TraceCheckUtils]: 0: Hoare triple {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:55,433 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume !(0 == ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:55,433 INFO L272 TraceCheckUtils]: 2: Hoare triple {9684#true} call processEnvironment__wrappee__base(); {9684#true} is VALID [2022-02-20 18:12:55,433 INFO L290 TraceCheckUtils]: 3: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,434 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {9684#true} {9684#true} #273#return; {9684#true} is VALID [2022-02-20 18:12:55,434 INFO L290 TraceCheckUtils]: 5: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,434 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {9684#true} {9729#(not (= ~switchedOnBeforeTS~0 0))} #253#return; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-02-20 18:12:55,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,437 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:55,437 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,438 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9684#true} {9729#(not (= ~switchedOnBeforeTS~0 0))} #257#return; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,438 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9684#true} is VALID [2022-02-20 18:12:55,438 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {9684#true} is VALID [2022-02-20 18:12:55,438 INFO L290 TraceCheckUtils]: 2: Hoare triple {9684#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9684#true} is VALID [2022-02-20 18:12:55,439 INFO L290 TraceCheckUtils]: 3: Hoare triple {9684#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {9686#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:12:55,439 INFO L290 TraceCheckUtils]: 4: Hoare triple {9686#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {9687#(= |ULTIMATE.start_main_~tmp~0#1| 1)} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 5: Hoare triple {9687#(= |ULTIMATE.start_main_~tmp~0#1| 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {9684#true} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 6: Hoare triple {9684#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {9684#true} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 7: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9684#true} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 8: Hoare triple {9684#true} assume !false; {9684#true} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 9: Hoare triple {9684#true} assume test_~splverifierCounter~0#1 < 4; {9684#true} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 10: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9684#true} is VALID [2022-02-20 18:12:55,440 INFO L290 TraceCheckUtils]: 11: Hoare triple {9684#true} assume 0 != test_~tmp~5#1; {9684#true} is VALID [2022-02-20 18:12:55,441 INFO L272 TraceCheckUtils]: 12: Hoare triple {9684#true} call waterRise(); {9740#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:55,441 INFO L290 TraceCheckUtils]: 13: Hoare triple {9740#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9684#true} is VALID [2022-02-20 18:12:55,441 INFO L290 TraceCheckUtils]: 14: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,441 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {9684#true} {9684#true} #263#return; {9684#true} is VALID [2022-02-20 18:12:55,442 INFO L290 TraceCheckUtils]: 16: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9684#true} is VALID [2022-02-20 18:12:55,442 INFO L290 TraceCheckUtils]: 17: Hoare triple {9684#true} assume !(0 != test_~tmp___0~1#1); {9684#true} is VALID [2022-02-20 18:12:55,442 INFO L290 TraceCheckUtils]: 18: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {9684#true} is VALID [2022-02-20 18:12:55,442 INFO L290 TraceCheckUtils]: 19: Hoare triple {9684#true} assume 0 != test_~tmp___2~0#1; {9684#true} is VALID [2022-02-20 18:12:55,443 INFO L272 TraceCheckUtils]: 20: Hoare triple {9684#true} call timeShift(); {9741#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:55,443 INFO L290 TraceCheckUtils]: 21: Hoare triple {9741#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:55,443 INFO L272 TraceCheckUtils]: 22: Hoare triple {9684#true} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:55,443 INFO L290 TraceCheckUtils]: 23: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:55,443 INFO L290 TraceCheckUtils]: 24: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,443 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {9684#true} {9684#true} #251#return; {9684#true} is VALID [2022-02-20 18:12:55,443 INFO L290 TraceCheckUtils]: 26: Hoare triple {9684#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:55,444 INFO L290 TraceCheckUtils]: 27: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9684#true} is VALID [2022-02-20 18:12:55,444 INFO L290 TraceCheckUtils]: 28: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:55,444 INFO L290 TraceCheckUtils]: 29: Hoare triple {9684#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9684#true} is VALID [2022-02-20 18:12:55,444 INFO L290 TraceCheckUtils]: 30: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:55,445 INFO L272 TraceCheckUtils]: 31: Hoare triple {9684#true} call processEnvironment__wrappee__highWaterSensor(); {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:55,445 INFO L290 TraceCheckUtils]: 32: Hoare triple {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:55,445 INFO L290 TraceCheckUtils]: 33: Hoare triple {9684#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:55,445 INFO L290 TraceCheckUtils]: 34: Hoare triple {9684#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:55,445 INFO L290 TraceCheckUtils]: 35: Hoare triple {9684#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {9684#true} is VALID [2022-02-20 18:12:55,445 INFO L290 TraceCheckUtils]: 36: Hoare triple {9684#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9684#true} is VALID [2022-02-20 18:12:55,445 INFO L290 TraceCheckUtils]: 37: Hoare triple {9684#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9684#true} is VALID [2022-02-20 18:12:55,446 INFO L290 TraceCheckUtils]: 38: Hoare triple {9684#true} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {9684#true} is VALID [2022-02-20 18:12:55,446 INFO L290 TraceCheckUtils]: 39: Hoare triple {9684#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {9684#true} is VALID [2022-02-20 18:12:55,446 INFO L290 TraceCheckUtils]: 40: Hoare triple {9684#true} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {9684#true} is VALID [2022-02-20 18:12:55,446 INFO L290 TraceCheckUtils]: 41: Hoare triple {9684#true} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {9684#true} is VALID [2022-02-20 18:12:55,447 INFO L290 TraceCheckUtils]: 42: Hoare triple {9684#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,447 INFO L290 TraceCheckUtils]: 43: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,447 INFO L290 TraceCheckUtils]: 44: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,448 INFO L290 TraceCheckUtils]: 45: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,448 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #255#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,448 INFO L290 TraceCheckUtils]: 47: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,449 INFO L290 TraceCheckUtils]: 48: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,449 INFO L290 TraceCheckUtils]: 49: Hoare triple {9760#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,450 INFO L290 TraceCheckUtils]: 50: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,450 INFO L290 TraceCheckUtils]: 51: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,450 INFO L290 TraceCheckUtils]: 52: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:55,451 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #267#return; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,451 INFO L290 TraceCheckUtils]: 54: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume !false; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,451 INFO L290 TraceCheckUtils]: 55: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,452 INFO L290 TraceCheckUtils]: 56: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,452 INFO L290 TraceCheckUtils]: 57: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~5#1); {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,453 INFO L290 TraceCheckUtils]: 58: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,453 INFO L290 TraceCheckUtils]: 59: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~1#1); {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,453 INFO L290 TraceCheckUtils]: 60: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,454 INFO L290 TraceCheckUtils]: 61: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,454 INFO L272 TraceCheckUtils]: 62: Hoare triple {9724#(not (= ~pumpRunning~0 0))} call timeShift(); {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,454 INFO L290 TraceCheckUtils]: 63: Hoare triple {9724#(not (= ~pumpRunning~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9724#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:55,455 INFO L272 TraceCheckUtils]: 64: Hoare triple {9724#(not (= ~pumpRunning~0 0))} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:55,455 INFO L290 TraceCheckUtils]: 65: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:55,455 INFO L290 TraceCheckUtils]: 66: Hoare triple {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:55,456 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {9762#(= ~pumpRunning~0 |isPumpRunning_#res|)} {9724#(not (= ~pumpRunning~0 0))} #251#return; {9728#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1| 0))} is VALID [2022-02-20 18:12:55,456 INFO L290 TraceCheckUtils]: 68: Hoare triple {9728#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1| 0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,457 INFO L290 TraceCheckUtils]: 69: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,457 INFO L290 TraceCheckUtils]: 70: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,458 INFO L290 TraceCheckUtils]: 71: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,458 INFO L290 TraceCheckUtils]: 72: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_lowerWaterLevel } true; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,458 INFO L290 TraceCheckUtils]: 73: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,459 INFO L290 TraceCheckUtils]: 74: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret54#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~10#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~10#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;isLowWaterSensorDry_~retValue_acc~6#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~6#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,459 INFO L290 TraceCheckUtils]: 75: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} isLowWaterLevel_#t~ret54#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret54#1 && isLowWaterLevel_#t~ret54#1 <= 2147483647;isLowWaterLevel_~tmp~10#1 := isLowWaterLevel_#t~ret54#1;havoc isLowWaterLevel_#t~ret54#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,459 INFO L290 TraceCheckUtils]: 76: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != isLowWaterLevel_~tmp~10#1;isLowWaterLevel_~tmp___0~3#1 := 0; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,460 INFO L290 TraceCheckUtils]: 77: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,460 INFO L290 TraceCheckUtils]: 78: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} processEnvironment_#t~ret42#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret42#1 && processEnvironment_#t~ret42#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret42#1;havoc processEnvironment_#t~ret42#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,460 INFO L290 TraceCheckUtils]: 79: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume !(0 != processEnvironment_~tmp~7#1); {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,461 INFO L272 TraceCheckUtils]: 80: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} call processEnvironment__wrappee__highWaterSensor(); {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:55,461 INFO L290 TraceCheckUtils]: 81: Hoare triple {9761#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:55,461 INFO L290 TraceCheckUtils]: 82: Hoare triple {9684#true} assume !(0 == ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:55,461 INFO L272 TraceCheckUtils]: 83: Hoare triple {9684#true} call processEnvironment__wrappee__base(); {9684#true} is VALID [2022-02-20 18:12:55,462 INFO L290 TraceCheckUtils]: 84: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,462 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {9684#true} {9684#true} #273#return; {9684#true} is VALID [2022-02-20 18:12:55,462 INFO L290 TraceCheckUtils]: 86: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,462 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {9684#true} {9729#(not (= ~switchedOnBeforeTS~0 0))} #253#return; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,463 INFO L290 TraceCheckUtils]: 88: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_processEnvironment } true; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,463 INFO L290 TraceCheckUtils]: 89: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,463 INFO L290 TraceCheckUtils]: 90: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,464 INFO L290 TraceCheckUtils]: 91: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,464 INFO L272 TraceCheckUtils]: 92: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:55,464 INFO L290 TraceCheckUtils]: 93: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:55,464 INFO L290 TraceCheckUtils]: 94: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:55,465 INFO L284 TraceCheckUtils]: 95: Hoare quadruple {9684#true} {9729#(not (= ~switchedOnBeforeTS~0 0))} #257#return; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,465 INFO L290 TraceCheckUtils]: 96: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,465 INFO L290 TraceCheckUtils]: 97: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {9729#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:55,466 INFO L290 TraceCheckUtils]: 98: Hoare triple {9729#(not (= ~switchedOnBeforeTS~0 0))} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {9685#false} is VALID [2022-02-20 18:12:55,466 INFO L290 TraceCheckUtils]: 99: Hoare triple {9685#false} assume !false; {9685#false} is VALID [2022-02-20 18:12:55,466 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:55,467 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:55,467 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082046014] [2022-02-20 18:12:55,467 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082046014] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:55,467 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [694974392] [2022-02-20 18:12:55,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:55,468 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:55,468 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:55,469 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:55,495 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:12:55,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,609 INFO L263 TraceCheckSpWp]: Trace formula consists of 488 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:12:55,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:55,647 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:56,235 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9684#true} is VALID [2022-02-20 18:12:56,235 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {9684#true} is VALID [2022-02-20 18:12:56,235 INFO L290 TraceCheckUtils]: 2: Hoare triple {9684#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 3: Hoare triple {9684#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 4: Hoare triple {9684#true} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 5: Hoare triple {9684#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 6: Hoare triple {9684#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 7: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 8: Hoare triple {9684#true} assume !false; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 9: Hoare triple {9684#true} assume test_~splverifierCounter~0#1 < 4; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 10: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9684#true} is VALID [2022-02-20 18:12:56,236 INFO L290 TraceCheckUtils]: 11: Hoare triple {9684#true} assume 0 != test_~tmp~5#1; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L272 TraceCheckUtils]: 12: Hoare triple {9684#true} call waterRise(); {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L290 TraceCheckUtils]: 13: Hoare triple {9684#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L290 TraceCheckUtils]: 14: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {9684#true} {9684#true} #263#return; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L290 TraceCheckUtils]: 16: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L290 TraceCheckUtils]: 17: Hoare triple {9684#true} assume !(0 != test_~tmp___0~1#1); {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L290 TraceCheckUtils]: 18: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L290 TraceCheckUtils]: 19: Hoare triple {9684#true} assume 0 != test_~tmp___2~0#1; {9684#true} is VALID [2022-02-20 18:12:56,237 INFO L272 TraceCheckUtils]: 20: Hoare triple {9684#true} call timeShift(); {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L290 TraceCheckUtils]: 21: Hoare triple {9684#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L272 TraceCheckUtils]: 22: Hoare triple {9684#true} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L290 TraceCheckUtils]: 23: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L290 TraceCheckUtils]: 24: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {9684#true} {9684#true} #251#return; {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L290 TraceCheckUtils]: 26: Hoare triple {9684#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L290 TraceCheckUtils]: 27: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9684#true} is VALID [2022-02-20 18:12:56,238 INFO L290 TraceCheckUtils]: 28: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 29: Hoare triple {9684#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 30: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L272 TraceCheckUtils]: 31: Hoare triple {9684#true} call processEnvironment__wrappee__highWaterSensor(); {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 32: Hoare triple {9684#true} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 33: Hoare triple {9684#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 34: Hoare triple {9684#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 35: Hoare triple {9684#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 36: Hoare triple {9684#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9684#true} is VALID [2022-02-20 18:12:56,239 INFO L290 TraceCheckUtils]: 37: Hoare triple {9684#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9684#true} is VALID [2022-02-20 18:12:56,240 INFO L290 TraceCheckUtils]: 38: Hoare triple {9684#true} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {9684#true} is VALID [2022-02-20 18:12:56,240 INFO L290 TraceCheckUtils]: 39: Hoare triple {9684#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {9684#true} is VALID [2022-02-20 18:12:56,240 INFO L290 TraceCheckUtils]: 40: Hoare triple {9684#true} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {9684#true} is VALID [2022-02-20 18:12:56,248 INFO L290 TraceCheckUtils]: 41: Hoare triple {9684#true} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {9684#true} is VALID [2022-02-20 18:12:56,249 INFO L290 TraceCheckUtils]: 42: Hoare triple {9684#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,250 INFO L290 TraceCheckUtils]: 43: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,250 INFO L290 TraceCheckUtils]: 44: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,250 INFO L290 TraceCheckUtils]: 45: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,251 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #255#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,251 INFO L290 TraceCheckUtils]: 47: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,252 INFO L290 TraceCheckUtils]: 48: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,252 INFO L290 TraceCheckUtils]: 49: Hoare triple {9760#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,252 INFO L290 TraceCheckUtils]: 50: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,253 INFO L290 TraceCheckUtils]: 51: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,253 INFO L290 TraceCheckUtils]: 52: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,253 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #267#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,254 INFO L290 TraceCheckUtils]: 54: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !false; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,254 INFO L290 TraceCheckUtils]: 55: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,255 INFO L290 TraceCheckUtils]: 56: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,255 INFO L290 TraceCheckUtils]: 57: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,255 INFO L290 TraceCheckUtils]: 58: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,256 INFO L290 TraceCheckUtils]: 59: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,256 INFO L290 TraceCheckUtils]: 60: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,256 INFO L290 TraceCheckUtils]: 61: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,257 INFO L272 TraceCheckUtils]: 62: Hoare triple {9760#(<= 1 ~pumpRunning~0)} call timeShift(); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,257 INFO L290 TraceCheckUtils]: 63: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,257 INFO L272 TraceCheckUtils]: 64: Hoare triple {9760#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,258 INFO L290 TraceCheckUtils]: 65: Hoare triple {9760#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9963#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:56,258 INFO L290 TraceCheckUtils]: 66: Hoare triple {9963#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {9963#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:56,259 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {9963#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {9760#(<= 1 ~pumpRunning~0)} #251#return; {9970#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1|)} is VALID [2022-02-20 18:12:56,260 INFO L290 TraceCheckUtils]: 68: Hoare triple {9970#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,260 INFO L290 TraceCheckUtils]: 69: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,260 INFO L290 TraceCheckUtils]: 70: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,261 INFO L290 TraceCheckUtils]: 71: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,261 INFO L290 TraceCheckUtils]: 72: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,261 INFO L290 TraceCheckUtils]: 73: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,262 INFO L290 TraceCheckUtils]: 74: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret54#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~10#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~10#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;isLowWaterSensorDry_~retValue_acc~6#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~6#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,262 INFO L290 TraceCheckUtils]: 75: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret54#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret54#1 && isLowWaterLevel_#t~ret54#1 <= 2147483647;isLowWaterLevel_~tmp~10#1 := isLowWaterLevel_#t~ret54#1;havoc isLowWaterLevel_#t~ret54#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,263 INFO L290 TraceCheckUtils]: 76: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != isLowWaterLevel_~tmp~10#1;isLowWaterLevel_~tmp___0~3#1 := 0; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,263 INFO L290 TraceCheckUtils]: 77: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,267 INFO L290 TraceCheckUtils]: 78: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret42#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret42#1 && processEnvironment_#t~ret42#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret42#1;havoc processEnvironment_#t~ret42#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,267 INFO L290 TraceCheckUtils]: 79: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~7#1); {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,268 INFO L272 TraceCheckUtils]: 80: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,268 INFO L290 TraceCheckUtils]: 81: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} havoc ~tmp~6#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,268 INFO L290 TraceCheckUtils]: 82: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,269 INFO L272 TraceCheckUtils]: 83: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,269 INFO L290 TraceCheckUtils]: 84: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,269 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {9974#(<= 1 ~switchedOnBeforeTS~0)} {9974#(<= 1 ~switchedOnBeforeTS~0)} #273#return; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,270 INFO L290 TraceCheckUtils]: 86: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,270 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {9974#(<= 1 ~switchedOnBeforeTS~0)} {9974#(<= 1 ~switchedOnBeforeTS~0)} #253#return; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,270 INFO L290 TraceCheckUtils]: 88: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,271 INFO L290 TraceCheckUtils]: 89: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,271 INFO L290 TraceCheckUtils]: 90: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,271 INFO L290 TraceCheckUtils]: 91: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,272 INFO L272 TraceCheckUtils]: 92: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,272 INFO L290 TraceCheckUtils]: 93: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,273 INFO L290 TraceCheckUtils]: 94: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,273 INFO L284 TraceCheckUtils]: 95: Hoare quadruple {9974#(<= 1 ~switchedOnBeforeTS~0)} {9974#(<= 1 ~switchedOnBeforeTS~0)} #257#return; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,273 INFO L290 TraceCheckUtils]: 96: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,274 INFO L290 TraceCheckUtils]: 97: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,274 INFO L290 TraceCheckUtils]: 98: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {9685#false} is VALID [2022-02-20 18:12:56,274 INFO L290 TraceCheckUtils]: 99: Hoare triple {9685#false} assume !false; {9685#false} is VALID [2022-02-20 18:12:56,275 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:12:56,275 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:56,824 INFO L290 TraceCheckUtils]: 99: Hoare triple {9685#false} assume !false; {9685#false} is VALID [2022-02-20 18:12:56,825 INFO L290 TraceCheckUtils]: 98: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {9685#false} is VALID [2022-02-20 18:12:56,826 INFO L290 TraceCheckUtils]: 97: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,826 INFO L290 TraceCheckUtils]: 96: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret36#1 && __utac_acc__Specification5_spec__3_#t~ret36#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret36#1;havoc __utac_acc__Specification5_spec__3_#t~ret36#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,826 INFO L284 TraceCheckUtils]: 95: Hoare quadruple {9684#true} {9974#(<= 1 ~switchedOnBeforeTS~0)} #257#return; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,827 INFO L290 TraceCheckUtils]: 94: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,827 INFO L290 TraceCheckUtils]: 93: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:56,827 INFO L272 TraceCheckUtils]: 92: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret36#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:56,827 INFO L290 TraceCheckUtils]: 91: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~4#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,828 INFO L290 TraceCheckUtils]: 90: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,828 INFO L290 TraceCheckUtils]: 89: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,828 INFO L290 TraceCheckUtils]: 88: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,829 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {9684#true} {9974#(<= 1 ~switchedOnBeforeTS~0)} #253#return; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,829 INFO L290 TraceCheckUtils]: 86: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,829 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {9684#true} {9684#true} #273#return; {9684#true} is VALID [2022-02-20 18:12:56,829 INFO L290 TraceCheckUtils]: 84: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,829 INFO L272 TraceCheckUtils]: 83: Hoare triple {9684#true} call processEnvironment__wrappee__base(); {9684#true} is VALID [2022-02-20 18:12:56,829 INFO L290 TraceCheckUtils]: 82: Hoare triple {9684#true} assume !(0 == ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:56,829 INFO L290 TraceCheckUtils]: 81: Hoare triple {9684#true} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:56,829 INFO L272 TraceCheckUtils]: 80: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {9684#true} is VALID [2022-02-20 18:12:56,830 INFO L290 TraceCheckUtils]: 79: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~7#1); {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,830 INFO L290 TraceCheckUtils]: 78: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret42#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret42#1 && processEnvironment_#t~ret42#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret42#1;havoc processEnvironment_#t~ret42#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,831 INFO L290 TraceCheckUtils]: 77: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~3#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,831 INFO L290 TraceCheckUtils]: 76: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != isLowWaterLevel_~tmp~10#1;isLowWaterLevel_~tmp___0~3#1 := 0; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,831 INFO L290 TraceCheckUtils]: 75: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret54#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret54#1 && isLowWaterLevel_#t~ret54#1 <= 2147483647;isLowWaterLevel_~tmp~10#1 := isLowWaterLevel_#t~ret54#1;havoc isLowWaterLevel_#t~ret54#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,832 INFO L290 TraceCheckUtils]: 74: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret54#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~10#1, isLowWaterLevel_~tmp___0~3#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~10#1;havoc isLowWaterLevel_~tmp___0~3#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;havoc isLowWaterSensorDry_~retValue_acc~6#1;isLowWaterSensorDry_~retValue_acc~6#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~6#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,832 INFO L290 TraceCheckUtils]: 73: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,833 INFO L290 TraceCheckUtils]: 72: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,833 INFO L290 TraceCheckUtils]: 71: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,833 INFO L290 TraceCheckUtils]: 70: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,834 INFO L290 TraceCheckUtils]: 69: Hoare triple {9974#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,834 INFO L290 TraceCheckUtils]: 68: Hoare triple {9970#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9974#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:56,835 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {10167#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {9760#(<= 1 ~pumpRunning~0)} #251#return; {9970#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret34#1|)} is VALID [2022-02-20 18:12:56,835 INFO L290 TraceCheckUtils]: 66: Hoare triple {10167#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {10167#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:56,836 INFO L290 TraceCheckUtils]: 65: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {10167#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:56,836 INFO L272 TraceCheckUtils]: 64: Hoare triple {9760#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:56,837 INFO L290 TraceCheckUtils]: 63: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,837 INFO L272 TraceCheckUtils]: 62: Hoare triple {9760#(<= 1 ~pumpRunning~0)} call timeShift(); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,837 INFO L290 TraceCheckUtils]: 61: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,838 INFO L290 TraceCheckUtils]: 60: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,838 INFO L290 TraceCheckUtils]: 59: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,839 INFO L290 TraceCheckUtils]: 58: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,839 INFO L290 TraceCheckUtils]: 57: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,840 INFO L290 TraceCheckUtils]: 56: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,840 INFO L290 TraceCheckUtils]: 55: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,840 INFO L290 TraceCheckUtils]: 54: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !false; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,841 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #267#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,841 INFO L290 TraceCheckUtils]: 52: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,842 INFO L290 TraceCheckUtils]: 51: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,842 INFO L290 TraceCheckUtils]: 50: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~4#1); {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,843 INFO L290 TraceCheckUtils]: 49: Hoare triple {9760#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret35#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret35#1 && __utac_acc__Specification5_spec__3_#t~ret35#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~4#1 := __utac_acc__Specification5_spec__3_#t~ret35#1;havoc __utac_acc__Specification5_spec__3_#t~ret35#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,843 INFO L290 TraceCheckUtils]: 48: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret35#1, __utac_acc__Specification5_spec__3_#t~ret36#1, __utac_acc__Specification5_spec__3_~tmp~4#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~4#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~4#1;havoc getWaterLevel_~retValue_acc~4#1;getWaterLevel_~retValue_acc~4#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~4#1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,843 INFO L290 TraceCheckUtils]: 47: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,844 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {9760#(<= 1 ~pumpRunning~0)} {9684#true} #255#return; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,844 INFO L290 TraceCheckUtils]: 45: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,845 INFO L290 TraceCheckUtils]: 44: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,845 INFO L290 TraceCheckUtils]: 43: Hoare triple {9760#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 42: Hoare triple {9684#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9760#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 41: Hoare triple {9684#true} activatePump_#t~ret43#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= activatePump_#t~ret43#1 && activatePump_#t~ret43#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret43#1;havoc activatePump_#t~ret43#1; {9684#true} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 40: Hoare triple {9684#true} isMethaneAlarm_#t~ret44#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret44#1 && isMethaneAlarm_#t~ret44#1 <= 2147483647;isMethaneAlarm_~retValue_acc~10#1 := isMethaneAlarm_#t~ret44#1;havoc isMethaneAlarm_#t~ret44#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~10#1; {9684#true} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 39: Hoare triple {9684#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret43#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret44#1, isMethaneAlarm_~retValue_acc~10#1;havoc isMethaneAlarm_~retValue_acc~10#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;havoc isMethaneLevelCritical_~retValue_acc~3#1;isMethaneLevelCritical_~retValue_acc~3#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~3#1; {9684#true} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 38: Hoare triple {9684#true} #t~ret41#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret41#1 && #t~ret41#1 <= 2147483647;~tmp~6#1 := #t~ret41#1;havoc #t~ret41#1; {9684#true} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 37: Hoare triple {9684#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9684#true} is VALID [2022-02-20 18:12:56,846 INFO L290 TraceCheckUtils]: 36: Hoare triple {9684#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9684#true} is VALID [2022-02-20 18:12:56,847 INFO L290 TraceCheckUtils]: 35: Hoare triple {9684#true} isHighWaterLevel_#t~ret53#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret53#1 && isHighWaterLevel_#t~ret53#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret53#1;havoc isHighWaterLevel_#t~ret53#1; {9684#true} is VALID [2022-02-20 18:12:56,847 INFO L290 TraceCheckUtils]: 34: Hoare triple {9684#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:56,847 INFO L290 TraceCheckUtils]: 33: Hoare triple {9684#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret53#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~5#1;havoc isHighWaterSensorDry_~retValue_acc~5#1; {9684#true} is VALID [2022-02-20 18:12:56,847 INFO L290 TraceCheckUtils]: 32: Hoare triple {9684#true} havoc ~tmp~6#1; {9684#true} is VALID [2022-02-20 18:12:56,847 INFO L272 TraceCheckUtils]: 31: Hoare triple {9684#true} call processEnvironment__wrappee__highWaterSensor(); {9684#true} is VALID [2022-02-20 18:12:56,847 INFO L290 TraceCheckUtils]: 30: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:56,848 INFO L290 TraceCheckUtils]: 29: Hoare triple {9684#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret42#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9684#true} is VALID [2022-02-20 18:12:56,848 INFO L290 TraceCheckUtils]: 28: Hoare triple {9684#true} assume !(0 != ~pumpRunning~0); {9684#true} is VALID [2022-02-20 18:12:56,848 INFO L290 TraceCheckUtils]: 27: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9684#true} is VALID [2022-02-20 18:12:56,848 INFO L290 TraceCheckUtils]: 26: Hoare triple {9684#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret34#1 && __utac_acc__Specification5_spec__2_#t~ret34#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret34#1;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:56,848 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {9684#true} {9684#true} #251#return; {9684#true} is VALID [2022-02-20 18:12:56,848 INFO L290 TraceCheckUtils]: 24: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L290 TraceCheckUtils]: 23: Hoare triple {9684#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L272 TraceCheckUtils]: 22: Hoare triple {9684#true} call __utac_acc__Specification5_spec__2_#t~ret34#1 := isPumpRunning(); {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L290 TraceCheckUtils]: 21: Hoare triple {9684#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret34#1; {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L272 TraceCheckUtils]: 20: Hoare triple {9684#true} call timeShift(); {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L290 TraceCheckUtils]: 19: Hoare triple {9684#true} assume 0 != test_~tmp___2~0#1; {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L290 TraceCheckUtils]: 18: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {9684#true} is VALID [2022-02-20 18:12:56,849 INFO L290 TraceCheckUtils]: 17: Hoare triple {9684#true} assume !(0 != test_~tmp___0~1#1); {9684#true} is VALID [2022-02-20 18:12:56,850 INFO L290 TraceCheckUtils]: 16: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9684#true} is VALID [2022-02-20 18:12:56,850 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {9684#true} {9684#true} #263#return; {9684#true} is VALID [2022-02-20 18:12:56,850 INFO L290 TraceCheckUtils]: 14: Hoare triple {9684#true} assume true; {9684#true} is VALID [2022-02-20 18:12:56,850 INFO L290 TraceCheckUtils]: 13: Hoare triple {9684#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9684#true} is VALID [2022-02-20 18:12:56,850 INFO L272 TraceCheckUtils]: 12: Hoare triple {9684#true} call waterRise(); {9684#true} is VALID [2022-02-20 18:12:56,850 INFO L290 TraceCheckUtils]: 11: Hoare triple {9684#true} assume 0 != test_~tmp~5#1; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 10: Hoare triple {9684#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 9: Hoare triple {9684#true} assume test_~splverifierCounter~0#1 < 4; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 8: Hoare triple {9684#true} assume !false; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 7: Hoare triple {9684#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_#t~nondet40#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 6: Hoare triple {9684#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 5: Hoare triple {9684#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {9684#true} is VALID [2022-02-20 18:12:56,851 INFO L290 TraceCheckUtils]: 4: Hoare triple {9684#true} main_#t~ret5#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret5#1 && main_#t~ret5#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret5#1;havoc main_#t~ret5#1; {9684#true} is VALID [2022-02-20 18:12:56,852 INFO L290 TraceCheckUtils]: 3: Hoare triple {9684#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {9684#true} is VALID [2022-02-20 18:12:56,852 INFO L290 TraceCheckUtils]: 2: Hoare triple {9684#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9684#true} is VALID [2022-02-20 18:12:56,852 INFO L290 TraceCheckUtils]: 1: Hoare triple {9684#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret5#1, main_~retValue_acc~2#1, main_~tmp~0#1;havoc main_~retValue_acc~2#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {9684#true} is VALID [2022-02-20 18:12:56,852 INFO L290 TraceCheckUtils]: 0: Hoare triple {9684#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9684#true} is VALID [2022-02-20 18:12:56,853 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:56,853 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [694974392] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:56,853 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:56,853 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-02-20 18:12:56,853 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430733306] [2022-02-20 18:12:56,854 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:56,855 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 100 [2022-02-20 18:12:56,861 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:56,861 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:12:56,976 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 160 edges. 160 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:56,977 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-02-20 18:12:56,977 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:56,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-02-20 18:12:56,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-02-20 18:12:56,978 INFO L87 Difference]: Start difference. First operand 433 states and 540 transitions. Second operand has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:13:00,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:00,081 INFO L93 Difference]: Finished difference Result 889 states and 1136 transitions. [2022-02-20 18:13:00,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-02-20 18:13:00,081 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 100 [2022-02-20 18:13:00,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:00,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:13:00,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 396 transitions. [2022-02-20 18:13:00,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:13:00,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 396 transitions. [2022-02-20 18:13:00,092 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 29 states and 396 transitions. [2022-02-20 18:13:00,435 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 396 edges. 396 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:00,435 INFO L225 Difference]: With dead ends: 889 [2022-02-20 18:13:00,435 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:13:00,438 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 262 GetRequests, 223 SyntacticMatches, 1 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 337 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=275, Invalid=1285, Unknown=0, NotChecked=0, Total=1560 [2022-02-20 18:13:00,439 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 426 mSDsluCounter, 1066 mSDsCounter, 0 mSdLazyCounter, 922 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 427 SdHoareTripleChecker+Valid, 1283 SdHoareTripleChecker+Invalid, 1099 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 922 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:00,439 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [427 Valid, 1283 Invalid, 1099 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 922 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-02-20 18:13:00,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:13:00,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:13:00,440 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:00,440 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:00,440 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:00,440 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:00,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:00,440 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:13:00,440 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:13:00,440 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:00,441 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:00,441 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:13:00,441 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:13:00,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:00,441 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:13:00,441 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:13:00,441 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:00,441 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:00,441 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:00,442 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:00,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:00,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:13:00,443 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 100 [2022-02-20 18:13:00,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:00,443 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:13:00,443 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-02-20 18:13:00,444 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:13:00,444 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:00,445 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:13:00,474 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:13:00,646 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:13:00,648 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:13:04,505 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 822 828) no Hoare annotation was computed. [2022-02-20 18:13:04,506 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 822 828) the Hoare annotation is: true [2022-02-20 18:13:04,506 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 232 243) the Hoare annotation is: true [2022-02-20 18:13:04,506 INFO L858 garLoopResultBuilder]: For program point L236-1(lines 232 243) no Hoare annotation was computed. [2022-02-20 18:13:04,506 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 232 243) no Hoare annotation was computed. [2022-02-20 18:13:04,506 INFO L854 garLoopResultBuilder]: At program point L692(lines 685 694) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse1 .cse4 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:04,506 INFO L854 garLoopResultBuilder]: At program point L304(lines 299 307) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:13:04,506 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 795 821) no Hoare annotation was computed. [2022-02-20 18:13:04,506 INFO L854 garLoopResultBuilder]: At program point L870(line 870) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:13:04,507 INFO L854 garLoopResultBuilder]: At program point L705(line 705) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse5) (or .cse8 .cse0 .cse5 .cse6) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse9 .cse4) .cse5 (and .cse2 .cse9 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:04,507 INFO L858 garLoopResultBuilder]: For program point L705-1(line 705) no Hoare annotation was computed. [2022-02-20 18:13:04,507 INFO L854 garLoopResultBuilder]: At program point L912(lines 907 914) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 (<= ~waterLevel~0 2) .cse3) .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse4 (not (<= 2 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse4))) [2022-02-20 18:13:04,507 INFO L854 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:13:04,507 INFO L854 garLoopResultBuilder]: At program point L875-1(lines 856 880) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|)) (and .cse6 .cse3 .cse4))) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse6 .cse7) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse7) .cse5)) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse6 .cse8 .cse4) .cse5 (and .cse2 .cse8 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:04,508 INFO L858 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2022-02-20 18:13:04,508 INFO L858 garLoopResultBuilder]: For program point L999(lines 999 1003) no Hoare annotation was computed. [2022-02-20 18:13:04,508 INFO L858 garLoopResultBuilder]: For program point L999-2(lines 999 1003) no Hoare annotation was computed. [2022-02-20 18:13:04,508 INFO L854 garLoopResultBuilder]: At program point L281(lines 276 284) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse8 (and .cse7 .cse9) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse9) .cse5)) (or .cse8 .cse0 .cse5 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse6) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse10 .cse4) .cse5 (and .cse2 .cse10 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:04,508 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-02-20 18:13:04,508 INFO L854 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:13:04,508 INFO L858 garLoopResultBuilder]: For program point L690-1(line 690) no Hoare annotation was computed. [2022-02-20 18:13:04,508 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 717) no Hoare annotation was computed. [2022-02-20 18:13:04,509 INFO L858 garLoopResultBuilder]: For program point L802(lines 802 808) no Hoare annotation was computed. [2022-02-20 18:13:04,509 INFO L858 garLoopResultBuilder]: For program point L802-2(lines 798 820) no Hoare annotation was computed. [2022-02-20 18:13:04,509 INFO L858 garLoopResultBuilder]: For program point L864(lines 864 872) no Hoare annotation was computed. [2022-02-20 18:13:04,509 INFO L858 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2022-02-20 18:13:04,509 INFO L854 garLoopResultBuilder]: At program point L703-1(lines 695 723) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not .cse6)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) .cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2) .cse4)) (let ((.cse7 (<= ~waterLevel~0 2))) (or .cse3 .cse5 (and .cse1 .cse6 .cse7 .cse8) .cse4 (and .cse9 .cse6 .cse7 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse0 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1|) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse3 .cse4 .cse10) (let ((.cse11 (= ~waterLevel~0 1))) (or (and .cse1 .cse6 .cse11 .cse8) .cse3 .cse5 (and .cse9 .cse6 .cse11 .cse8) .cse4 .cse10))))) [2022-02-20 18:13:04,509 INFO L858 garLoopResultBuilder]: For program point L860(lines 860 877) no Hoare annotation was computed. [2022-02-20 18:13:04,510 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2022-02-20 18:13:04,510 INFO L858 garLoopResultBuilder]: For program point L212(lines 212 216) no Hoare annotation was computed. [2022-02-20 18:13:04,510 INFO L854 garLoopResultBuilder]: At program point L212-2(lines 208 219) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:13:04,510 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 795 821) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:13:04,510 INFO L854 garLoopResultBuilder]: At program point L1005(lines 990 1008) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:13:04,510 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 795 821) no Hoare annotation was computed. [2022-02-20 18:13:04,511 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-02-20 18:13:04,511 INFO L858 garLoopResultBuilder]: For program point L708(lines 708 714) no Hoare annotation was computed. [2022-02-20 18:13:04,511 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 99 128) no Hoare annotation was computed. [2022-02-20 18:13:04,511 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 99 128) the Hoare annotation is: true [2022-02-20 18:13:04,511 INFO L861 garLoopResultBuilder]: At program point L124(lines 99 128) the Hoare annotation is: true [2022-02-20 18:13:04,511 INFO L858 garLoopResultBuilder]: For program point L120(line 120) no Hoare annotation was computed. [2022-02-20 18:13:04,511 INFO L858 garLoopResultBuilder]: For program point L113(lines 113 117) no Hoare annotation was computed. [2022-02-20 18:13:04,512 INFO L861 garLoopResultBuilder]: At program point L113-1(lines 113 117) the Hoare annotation is: true [2022-02-20 18:13:04,512 INFO L858 garLoopResultBuilder]: For program point L110(line 110) no Hoare annotation was computed. [2022-02-20 18:13:04,512 INFO L861 garLoopResultBuilder]: At program point L109-2(lines 109 123) the Hoare annotation is: true [2022-02-20 18:13:04,512 INFO L861 garLoopResultBuilder]: At program point L105(line 105) the Hoare annotation is: true [2022-02-20 18:13:04,512 INFO L858 garLoopResultBuilder]: For program point L105-1(line 105) no Hoare annotation was computed. [2022-02-20 18:13:04,512 INFO L858 garLoopResultBuilder]: For program point L737(lines 737 741) no Hoare annotation was computed. [2022-02-20 18:13:04,512 INFO L854 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:04,513 INFO L858 garLoopResultBuilder]: For program point L771(lines 771 775) no Hoare annotation was computed. [2022-02-20 18:13:04,513 INFO L854 garLoopResultBuilder]: At program point L771-2(lines 765 776) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-02-20 18:13:04,513 INFO L854 garLoopResultBuilder]: At program point L160(lines 156 162) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:04,513 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:13:04,513 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:13:04,513 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:13:04,513 INFO L858 garLoopResultBuilder]: For program point L755(lines 755 761) no Hoare annotation was computed. [2022-02-20 18:13:04,514 INFO L858 garLoopResultBuilder]: For program point L755-1(lines 755 761) no Hoare annotation was computed. [2022-02-20 18:13:04,514 INFO L861 garLoopResultBuilder]: At program point L784(lines 725 788) the Hoare annotation is: true [2022-02-20 18:13:04,514 INFO L861 garLoopResultBuilder]: At program point L173(lines 165 175) the Hoare annotation is: true [2022-02-20 18:13:04,514 INFO L854 garLoopResultBuilder]: At program point L747(line 747) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-02-20 18:13:04,514 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:13:04,514 INFO L858 garLoopResultBuilder]: For program point L186(lines 186 193) no Hoare annotation was computed. [2022-02-20 18:13:04,514 INFO L858 garLoopResultBuilder]: For program point L186-2(lines 186 193) no Hoare annotation was computed. [2022-02-20 18:13:04,515 INFO L854 garLoopResultBuilder]: At program point L781(lines 734 782) the Hoare annotation is: false [2022-02-20 18:13:04,515 INFO L854 garLoopResultBuilder]: At program point L682(lines 677 684) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:04,515 INFO L861 garLoopResultBuilder]: At program point L195(lines 176 198) the Hoare annotation is: true [2022-02-20 18:13:04,515 INFO L858 garLoopResultBuilder]: For program point L736(lines 735 780) no Hoare annotation was computed. [2022-02-20 18:13:04,515 INFO L858 garLoopResultBuilder]: For program point L765(lines 765 776) no Hoare annotation was computed. [2022-02-20 18:13:04,515 INFO L854 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:04,516 INFO L854 garLoopResultBuilder]: At program point L757(line 757) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-02-20 18:13:04,516 INFO L854 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:04,516 INFO L854 garLoopResultBuilder]: At program point L778(lines 735 780) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-02-20 18:13:04,516 INFO L858 garLoopResultBuilder]: For program point L745(lines 745 751) no Hoare annotation was computed. [2022-02-20 18:13:04,516 INFO L858 garLoopResultBuilder]: For program point L745-1(lines 745 751) no Hoare annotation was computed. [2022-02-20 18:13:04,516 INFO L858 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-02-20 18:13:04,516 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 830 854) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2022-02-20 18:13:04,517 INFO L854 garLoopResultBuilder]: At program point L886(lines 881 888) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2022-02-20 18:13:04,517 INFO L854 garLoopResultBuilder]: At program point L849(line 849) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-02-20 18:13:04,517 INFO L858 garLoopResultBuilder]: For program point L849-1(lines 830 854) no Hoare annotation was computed. [2022-02-20 18:13:04,517 INFO L854 garLoopResultBuilder]: At program point L294(lines 285 298) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse2 (and .cse1 (<= 2 ~waterLevel~0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:04,517 INFO L858 garLoopResultBuilder]: For program point L897(lines 897 903) no Hoare annotation was computed. [2022-02-20 18:13:04,517 INFO L854 garLoopResultBuilder]: At program point L897-2(lines 890 906) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 .cse2 (and (= ~pumpRunning~0 0) .cse0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:04,518 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 830 854) no Hoare annotation was computed. [2022-02-20 18:13:04,518 INFO L854 garLoopResultBuilder]: At program point L986(lines 971 989) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:04,518 INFO L854 garLoopResultBuilder]: At program point L922(lines 915 925) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))))) [2022-02-20 18:13:04,518 INFO L854 garLoopResultBuilder]: At program point L249(lines 244 252) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))))) [2022-02-20 18:13:04,518 INFO L858 garLoopResultBuilder]: For program point L980(lines 980 984) no Hoare annotation was computed. [2022-02-20 18:13:04,518 INFO L858 garLoopResultBuilder]: For program point L980-2(lines 980 984) no Hoare annotation was computed. [2022-02-20 18:13:04,519 INFO L854 garLoopResultBuilder]: At program point L844(line 844) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:04,519 INFO L858 garLoopResultBuilder]: For program point L838(lines 838 846) no Hoare annotation was computed. [2022-02-20 18:13:04,519 INFO L858 garLoopResultBuilder]: For program point L834(lines 834 851) no Hoare annotation was computed. [2022-02-20 18:13:04,519 INFO L858 garLoopResultBuilder]: For program point L224-1(lines 220 231) no Hoare annotation was computed. [2022-02-20 18:13:04,519 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 220 231) no Hoare annotation was computed. [2022-02-20 18:13:04,519 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 220 231) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse2 .cse3))) [2022-02-20 18:13:04,519 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 926 934) no Hoare annotation was computed. [2022-02-20 18:13:04,520 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 926 934) the Hoare annotation is: true [2022-02-20 18:13:04,520 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 926 934) no Hoare annotation was computed. [2022-02-20 18:13:04,522 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:04,524 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:13:04,526 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:13:04,526 WARN L170 areAnnotationChecker]: L236-1 has no Hoare annotation [2022-02-20 18:13:04,526 WARN L170 areAnnotationChecker]: L236-1 has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: L834 has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: L224-1 has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: L224-1 has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:13:04,529 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:13:04,530 WARN L170 areAnnotationChecker]: L236-1 has no Hoare annotation [2022-02-20 18:13:04,530 WARN L170 areAnnotationChecker]: L690-1 has no Hoare annotation [2022-02-20 18:13:04,530 WARN L170 areAnnotationChecker]: L105-1 has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: L834 has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: L834 has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: L224-1 has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: L849-1 has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:13:04,531 WARN L170 areAnnotationChecker]: L690-1 has no Hoare annotation [2022-02-20 18:13:04,532 WARN L170 areAnnotationChecker]: L105-1 has no Hoare annotation [2022-02-20 18:13:04,532 WARN L170 areAnnotationChecker]: L289 has no Hoare annotation [2022-02-20 18:13:04,532 WARN L170 areAnnotationChecker]: L289 has no Hoare annotation [2022-02-20 18:13:04,532 WARN L170 areAnnotationChecker]: L849-1 has no Hoare annotation [2022-02-20 18:13:04,532 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:13:04,532 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:13:04,533 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:13:04,533 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:04,533 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:04,533 WARN L170 areAnnotationChecker]: L755-1 has no Hoare annotation [2022-02-20 18:13:04,533 WARN L170 areAnnotationChecker]: L802 has no Hoare annotation [2022-02-20 18:13:04,533 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L980 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L745-1 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L705-1 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L809-1 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L765 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L765 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L802 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: L802 has no Hoare annotation [2022-02-20 18:13:04,534 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L186 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L980 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L980 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L755 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L755 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L707 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L707 has no Hoare annotation [2022-02-20 18:13:04,535 WARN L170 areAnnotationChecker]: L809-1 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L771 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L771 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L212 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L212 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L802-2 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L802-2 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-02-20 18:13:04,537 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L186 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L186 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L980-2 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L755-1 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L708 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L708 has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:13:04,538 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-02-20 18:13:04,541 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:13:04,542 WARN L170 areAnnotationChecker]: L802-2 has no Hoare annotation [2022-02-20 18:13:04,542 WARN L170 areAnnotationChecker]: L860 has no Hoare annotation [2022-02-20 18:13:04,542 WARN L170 areAnnotationChecker]: L860 has no Hoare annotation [2022-02-20 18:13:04,542 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-02-20 18:13:04,543 WARN L170 areAnnotationChecker]: L186-2 has no Hoare annotation [2022-02-20 18:13:04,543 WARN L170 areAnnotationChecker]: L838 has no Hoare annotation [2022-02-20 18:13:04,543 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2022-02-20 18:13:04,543 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2022-02-20 18:13:04,543 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:13:04,544 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-02-20 18:13:04,544 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-02-20 18:13:04,544 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:13:04,544 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:13:04,544 WARN L170 areAnnotationChecker]: L999 has no Hoare annotation [2022-02-20 18:13:04,545 WARN L170 areAnnotationChecker]: L186-2 has no Hoare annotation [2022-02-20 18:13:04,545 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-02-20 18:13:04,545 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:13:04,546 WARN L170 areAnnotationChecker]: L838 has no Hoare annotation [2022-02-20 18:13:04,546 WARN L170 areAnnotationChecker]: L838 has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: L705-1 has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: L737 has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: L999 has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: L999 has no Hoare annotation [2022-02-20 18:13:04,548 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:13:04,550 WARN L170 areAnnotationChecker]: L849-1 has no Hoare annotation [2022-02-20 18:13:04,550 WARN L170 areAnnotationChecker]: L745 has no Hoare annotation [2022-02-20 18:13:04,550 WARN L170 areAnnotationChecker]: L745 has no Hoare annotation [2022-02-20 18:13:04,550 WARN L170 areAnnotationChecker]: L999-2 has no Hoare annotation [2022-02-20 18:13:04,550 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2022-02-20 18:13:04,551 WARN L170 areAnnotationChecker]: L745-1 has no Hoare annotation [2022-02-20 18:13:04,552 WARN L170 areAnnotationChecker]: L864 has no Hoare annotation [2022-02-20 18:13:04,552 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2022-02-20 18:13:04,552 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2022-02-20 18:13:04,552 WARN L170 areAnnotationChecker]: L864 has no Hoare annotation [2022-02-20 18:13:04,552 WARN L170 areAnnotationChecker]: L864 has no Hoare annotation [2022-02-20 18:13:04,552 WARN L170 areAnnotationChecker]: L849-1 has no Hoare annotation [2022-02-20 18:13:04,557 INFO L163 areAnnotationChecker]: CFG has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:13:04,585 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:13:04 BoogieIcfgContainer [2022-02-20 18:13:04,585 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:13:04,586 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:13:04,586 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:13:04,586 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:13:04,587 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:12:45" (3/4) ... [2022-02-20 18:13:04,589 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:13:04,594 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:13:04,594 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:13:04,594 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:13:04,594 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:13:04,595 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:13:04,595 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:13:04,595 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:13:04,601 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-02-20 18:13:04,602 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:13:04,602 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:13:04,603 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:13:04,603 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:13:04,603 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:13:04,604 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:13:04,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-02-20 18:13:04,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-02-20 18:13:04,624 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-02-20 18:13:04,624 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && tmp == 1) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || ((((((1 <= pumpRunning && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || (((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) [2022-02-20 18:13:04,625 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:13:04,625 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:04,625 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (((\result <= 2 && tmp <= 2) && 1 < tmp) && 2 <= \result)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:04,626 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:13:04,626 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:13:04,626 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:13:04,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:04,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:13:04,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:04,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:13:04,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:13:04,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-02-20 18:13:04,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-02-20 18:13:04,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:13:04,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-02-20 18:13:04,659 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:13:04,659 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:13:04,660 INFO L158 Benchmark]: Toolchain (without parser) took 19946.52ms. Allocated memory was 83.9MB in the beginning and 130.0MB in the end (delta: 46.1MB). Free memory was 49.7MB in the beginning and 70.3MB in the end (delta: -20.6MB). Peak memory consumption was 26.5MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,660 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 83.9MB. Free memory was 63.4MB in the beginning and 63.4MB in the end (delta: 25.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:13:04,661 INFO L158 Benchmark]: CACSL2BoogieTranslator took 391.23ms. Allocated memory was 83.9MB in the beginning and 107.0MB in the end (delta: 23.1MB). Free memory was 49.4MB in the beginning and 71.4MB in the end (delta: -22.0MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,664 INFO L158 Benchmark]: Boogie Procedure Inliner took 87.03ms. Allocated memory is still 107.0MB. Free memory was 71.4MB in the beginning and 68.2MB in the end (delta: 3.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,664 INFO L158 Benchmark]: Boogie Preprocessor took 27.10ms. Allocated memory is still 107.0MB. Free memory was 68.1MB in the beginning and 66.1MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,665 INFO L158 Benchmark]: RCFGBuilder took 547.53ms. Allocated memory is still 107.0MB. Free memory was 66.1MB in the beginning and 44.2MB in the end (delta: 21.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,665 INFO L158 Benchmark]: TraceAbstraction took 18810.34ms. Allocated memory was 107.0MB in the beginning and 130.0MB in the end (delta: 23.1MB). Free memory was 43.7MB in the beginning and 76.5MB in the end (delta: -32.9MB). Peak memory consumption was 43.7MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,665 INFO L158 Benchmark]: Witness Printer took 73.18ms. Allocated memory is still 130.0MB. Free memory was 76.5MB in the beginning and 70.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:13:04,666 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 83.9MB. Free memory was 63.4MB in the beginning and 63.4MB in the end (delta: 25.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 391.23ms. Allocated memory was 83.9MB in the beginning and 107.0MB in the end (delta: 23.1MB). Free memory was 49.4MB in the beginning and 71.4MB in the end (delta: -22.0MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 87.03ms. Allocated memory is still 107.0MB. Free memory was 71.4MB in the beginning and 68.2MB in the end (delta: 3.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.10ms. Allocated memory is still 107.0MB. Free memory was 68.1MB in the beginning and 66.1MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 547.53ms. Allocated memory is still 107.0MB. Free memory was 66.1MB in the beginning and 44.2MB in the end (delta: 21.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 18810.34ms. Allocated memory was 107.0MB in the beginning and 130.0MB in the end (delta: 23.1MB). Free memory was 43.7MB in the beginning and 76.5MB in the end (delta: -32.9MB). Peak memory consumption was 43.7MB. Max. memory is 16.1GB. * Witness Printer took 73.18ms. Allocated memory is still 130.0MB. Free memory was 76.5MB in the beginning and 70.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.7s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 10.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1644 SdHoareTripleChecker+Valid, 2.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1615 mSDsluCounter, 4024 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2826 mSDsCounter, 499 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2045 IncrementalHoareTripleChecker+Invalid, 2544 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 499 mSolverCounterUnsat, 1198 mSDtfsCounter, 2045 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 403 GetRequests, 293 SyntacticMatches, 2 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=433occurred in iteration=9, InterpolantAutomatonStates: 102, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 137 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 1014 PreInvPairs, 1210 NumberOfFragments, 1918 HoareAnnotationTreeSize, 1014 FomulaSimplifications, 794 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 45 FomulaSimplificationsInter, 8244 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 624 NumberOfCodeBlocks, 624 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 712 ConstructedInterpolants, 0 QuantifiedInterpolants, 1478 SizeOfPredicates, 3 NumberOfNonLiveVariables, 488 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 100/126 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (((\result <= 2 && tmp <= 2) && 1 < tmp) && 2 <= \result)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && tmp == 1) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || ((((((1 <= pumpRunning && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || (((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) - InvariantResult [Line: 99]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:13:04,719 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE