./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:13:07,883 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:13:07,886 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:13:07,931 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:13:07,932 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:13:07,937 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:13:07,944 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:13:07,947 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:13:07,949 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:13:07,955 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:13:07,956 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:13:07,957 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:13:07,957 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:13:07,960 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:13:07,961 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:13:07,964 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:13:07,966 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:13:07,966 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:13:07,969 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:13:07,973 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:13:07,974 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:13:07,975 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:13:07,977 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:13:07,978 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:13:07,981 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:13:07,981 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:13:07,982 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:13:07,983 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:13:07,984 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:13:07,984 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:13:07,985 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:13:07,985 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:13:07,987 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:13:07,988 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:13:07,989 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:13:07,989 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:13:07,990 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:13:07,990 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:13:07,990 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:13:07,991 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:13:07,992 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:13:07,992 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:13:08,014 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:13:08,015 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:13:08,015 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:13:08,016 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:13:08,016 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:13:08,017 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:13:08,017 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:13:08,017 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:13:08,017 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:13:08,018 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:13:08,018 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:13:08,019 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:13:08,019 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:13:08,019 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:13:08,019 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:13:08,019 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:13:08,020 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:13:08,020 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:13:08,020 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:13:08,020 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:13:08,020 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:13:08,020 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:13:08,021 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:13:08,021 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:13:08,021 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:13:08,021 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:13:08,021 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:13:08,022 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:13:08,022 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:13:08,022 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:13:08,022 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:13:08,022 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:13:08,023 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:13:08,023 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a [2022-02-20 18:13:08,298 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:13:08,321 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:13:08,324 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:13:08,325 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:13:08,326 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:13:08,327 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2022-02-20 18:13:08,390 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3ed702dae/6bcc09f3159140bdb45691d796eef1c2/FLAG52192b4cc [2022-02-20 18:13:08,887 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:13:08,888 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2022-02-20 18:13:08,912 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3ed702dae/6bcc09f3159140bdb45691d796eef1c2/FLAG52192b4cc [2022-02-20 18:13:09,228 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3ed702dae/6bcc09f3159140bdb45691d796eef1c2 [2022-02-20 18:13:09,231 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:13:09,232 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:13:09,233 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:13:09,234 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:13:09,237 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:13:09,238 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,239 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@304fa7d6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09, skipping insertion in model container [2022-02-20 18:13:09,239 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,245 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:13:09,298 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:13:09,517 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2022-02-20 18:13:09,658 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:13:09,674 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:13:09,705 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2022-02-20 18:13:09,764 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:13:09,784 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:13:09,785 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09 WrapperNode [2022-02-20 18:13:09,785 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:13:09,786 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:13:09,786 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:13:09,786 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:13:09,793 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,823 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,876 INFO L137 Inliner]: procedures = 65, calls = 180, calls flagged for inlining = 30, calls inlined = 27, statements flattened = 356 [2022-02-20 18:13:09,877 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:13:09,878 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:13:09,878 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:13:09,878 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:13:09,885 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,886 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,896 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,896 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,910 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,921 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,930 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,933 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:13:09,934 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:13:09,934 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:13:09,934 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:13:09,935 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (1/1) ... [2022-02-20 18:13:09,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:13:09,952 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:13:09,969 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:13:09,988 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:13:10,010 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:13:10,010 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:13:10,011 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:13:10,011 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:13:10,011 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:13:10,011 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:13:10,011 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:13:10,012 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:13:10,013 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:13:10,013 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:13:10,013 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:13:10,013 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:13:10,014 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:13:10,014 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:13:10,014 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:13:10,014 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:13:10,014 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:13:10,014 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:13:10,015 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:13:10,015 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:13:10,015 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:13:10,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:13:10,015 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:13:10,015 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:13:10,015 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:13:10,016 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:13:10,016 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:13:10,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:13:10,145 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:13:10,147 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:13:10,594 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:13:10,603 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:13:10,605 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:13:10,607 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:13:10 BoogieIcfgContainer [2022-02-20 18:13:10,608 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:13:10,622 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:13:10,623 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:13:10,626 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:13:10,626 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:13:09" (1/3) ... [2022-02-20 18:13:10,627 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@148e4393 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:13:10, skipping insertion in model container [2022-02-20 18:13:10,627 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:13:09" (2/3) ... [2022-02-20 18:13:10,627 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@148e4393 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:13:10, skipping insertion in model container [2022-02-20 18:13:10,628 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:13:10" (3/3) ... [2022-02-20 18:13:10,629 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_productSimulator.cil.c [2022-02-20 18:13:10,633 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:13:10,634 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:13:10,671 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:13:10,677 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:13:10,677 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:13:10,708 INFO L276 IsEmpty]: Start isEmpty. Operand has 148 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 120 states have internal predecessors, (141), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-02-20 18:13:10,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-02-20 18:13:10,722 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:10,723 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:10,724 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:10,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:10,729 INFO L85 PathProgramCache]: Analyzing trace with hash 1460925416, now seen corresponding path program 1 times [2022-02-20 18:13:10,737 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:10,738 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [674868064] [2022-02-20 18:13:10,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:10,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:10,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:11,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,066 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,066 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,067 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {151#true} #370#return; {151#true} is VALID [2022-02-20 18:13:11,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:11,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,075 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,075 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,076 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {151#true} #372#return; {151#true} is VALID [2022-02-20 18:13:11,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:11,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,083 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,083 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,084 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {151#true} #374#return; {151#true} is VALID [2022-02-20 18:13:11,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:11,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,090 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,090 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,091 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {151#true} #376#return; {151#true} is VALID [2022-02-20 18:13:11,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:11,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,097 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,098 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,098 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {151#true} #378#return; {151#true} is VALID [2022-02-20 18:13:11,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:11,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,105 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,105 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,106 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {151#true} #380#return; {151#true} is VALID [2022-02-20 18:13:11,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:13:11,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {151#true} is VALID [2022-02-20 18:13:11,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {152#false} #352#return; {152#false} is VALID [2022-02-20 18:13:11,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-02-20 18:13:11,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:11,125 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {151#true} is VALID [2022-02-20 18:13:11,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,126 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {151#true} {152#false} #364#return; {152#false} is VALID [2022-02-20 18:13:11,126 INFO L290 TraceCheckUtils]: 0: Hoare triple {151#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {151#true} is VALID [2022-02-20 18:13:11,127 INFO L290 TraceCheckUtils]: 1: Hoare triple {151#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {151#true} is VALID [2022-02-20 18:13:11,127 INFO L290 TraceCheckUtils]: 2: Hoare triple {151#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {151#true} is VALID [2022-02-20 18:13:11,127 INFO L272 TraceCheckUtils]: 3: Hoare triple {151#true} call select_features_#t~ret11#1 := select_one(); {151#true} is VALID [2022-02-20 18:13:11,128 INFO L290 TraceCheckUtils]: 4: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,128 INFO L290 TraceCheckUtils]: 5: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,128 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {151#true} {151#true} #370#return; {151#true} is VALID [2022-02-20 18:13:11,128 INFO L290 TraceCheckUtils]: 7: Hoare triple {151#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {151#true} is VALID [2022-02-20 18:13:11,129 INFO L272 TraceCheckUtils]: 8: Hoare triple {151#true} call select_features_#t~ret12#1 := select_one(); {151#true} is VALID [2022-02-20 18:13:11,129 INFO L290 TraceCheckUtils]: 9: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,129 INFO L290 TraceCheckUtils]: 10: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,129 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {151#true} {151#true} #372#return; {151#true} is VALID [2022-02-20 18:13:11,130 INFO L290 TraceCheckUtils]: 12: Hoare triple {151#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {151#true} is VALID [2022-02-20 18:13:11,130 INFO L272 TraceCheckUtils]: 13: Hoare triple {151#true} call select_features_#t~ret13#1 := select_one(); {151#true} is VALID [2022-02-20 18:13:11,130 INFO L290 TraceCheckUtils]: 14: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,130 INFO L290 TraceCheckUtils]: 15: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,131 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {151#true} {151#true} #374#return; {151#true} is VALID [2022-02-20 18:13:11,131 INFO L290 TraceCheckUtils]: 17: Hoare triple {151#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {151#true} is VALID [2022-02-20 18:13:11,131 INFO L272 TraceCheckUtils]: 18: Hoare triple {151#true} call select_features_#t~ret14#1 := select_one(); {151#true} is VALID [2022-02-20 18:13:11,131 INFO L290 TraceCheckUtils]: 19: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,132 INFO L290 TraceCheckUtils]: 20: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,132 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {151#true} {151#true} #376#return; {151#true} is VALID [2022-02-20 18:13:11,132 INFO L290 TraceCheckUtils]: 22: Hoare triple {151#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {151#true} is VALID [2022-02-20 18:13:11,132 INFO L272 TraceCheckUtils]: 23: Hoare triple {151#true} call select_features_#t~ret15#1 := select_one(); {151#true} is VALID [2022-02-20 18:13:11,133 INFO L290 TraceCheckUtils]: 24: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,133 INFO L290 TraceCheckUtils]: 25: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,133 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {151#true} {151#true} #378#return; {151#true} is VALID [2022-02-20 18:13:11,133 INFO L290 TraceCheckUtils]: 27: Hoare triple {151#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {151#true} is VALID [2022-02-20 18:13:11,134 INFO L272 TraceCheckUtils]: 28: Hoare triple {151#true} call select_features_#t~ret16#1 := select_one(); {151#true} is VALID [2022-02-20 18:13:11,134 INFO L290 TraceCheckUtils]: 29: Hoare triple {151#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {151#true} is VALID [2022-02-20 18:13:11,134 INFO L290 TraceCheckUtils]: 30: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,134 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {151#true} {151#true} #380#return; {151#true} is VALID [2022-02-20 18:13:11,135 INFO L290 TraceCheckUtils]: 32: Hoare triple {151#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {151#true} is VALID [2022-02-20 18:13:11,135 INFO L290 TraceCheckUtils]: 33: Hoare triple {151#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {151#true} is VALID [2022-02-20 18:13:11,135 INFO L290 TraceCheckUtils]: 34: Hoare triple {151#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {151#true} is VALID [2022-02-20 18:13:11,136 INFO L290 TraceCheckUtils]: 35: Hoare triple {151#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {151#true} is VALID [2022-02-20 18:13:11,136 INFO L290 TraceCheckUtils]: 36: Hoare triple {151#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {151#true} is VALID [2022-02-20 18:13:11,136 INFO L290 TraceCheckUtils]: 37: Hoare triple {151#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {151#true} is VALID [2022-02-20 18:13:11,137 INFO L290 TraceCheckUtils]: 38: Hoare triple {151#true} assume !true; {152#false} is VALID [2022-02-20 18:13:11,137 INFO L272 TraceCheckUtils]: 39: Hoare triple {152#false} call cleanup(); {152#false} is VALID [2022-02-20 18:13:11,138 INFO L290 TraceCheckUtils]: 40: Hoare triple {152#false} havoc ~i~0;havoc ~__cil_tmp2~0; {152#false} is VALID [2022-02-20 18:13:11,138 INFO L272 TraceCheckUtils]: 41: Hoare triple {152#false} call timeShift(); {152#false} is VALID [2022-02-20 18:13:11,138 INFO L290 TraceCheckUtils]: 42: Hoare triple {152#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {152#false} is VALID [2022-02-20 18:13:11,138 INFO L272 TraceCheckUtils]: 43: Hoare triple {152#false} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {151#true} is VALID [2022-02-20 18:13:11,139 INFO L290 TraceCheckUtils]: 44: Hoare triple {151#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {151#true} is VALID [2022-02-20 18:13:11,139 INFO L290 TraceCheckUtils]: 45: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,139 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {151#true} {152#false} #352#return; {152#false} is VALID [2022-02-20 18:13:11,139 INFO L290 TraceCheckUtils]: 47: Hoare triple {152#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {152#false} is VALID [2022-02-20 18:13:11,140 INFO L290 TraceCheckUtils]: 48: Hoare triple {152#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {152#false} is VALID [2022-02-20 18:13:11,140 INFO L290 TraceCheckUtils]: 49: Hoare triple {152#false} assume !(0 != ~pumpRunning~0); {152#false} is VALID [2022-02-20 18:13:11,140 INFO L290 TraceCheckUtils]: 50: Hoare triple {152#false} assume !(0 != ~systemActive~0); {152#false} is VALID [2022-02-20 18:13:11,140 INFO L290 TraceCheckUtils]: 51: Hoare triple {152#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {152#false} is VALID [2022-02-20 18:13:11,141 INFO L290 TraceCheckUtils]: 52: Hoare triple {152#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {152#false} is VALID [2022-02-20 18:13:11,141 INFO L290 TraceCheckUtils]: 53: Hoare triple {152#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {152#false} is VALID [2022-02-20 18:13:11,141 INFO L272 TraceCheckUtils]: 54: Hoare triple {152#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {151#true} is VALID [2022-02-20 18:13:11,142 INFO L290 TraceCheckUtils]: 55: Hoare triple {151#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {151#true} is VALID [2022-02-20 18:13:11,142 INFO L290 TraceCheckUtils]: 56: Hoare triple {151#true} assume true; {151#true} is VALID [2022-02-20 18:13:11,142 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {151#true} {152#false} #364#return; {152#false} is VALID [2022-02-20 18:13:11,142 INFO L290 TraceCheckUtils]: 58: Hoare triple {152#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {152#false} is VALID [2022-02-20 18:13:11,143 INFO L290 TraceCheckUtils]: 59: Hoare triple {152#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {152#false} is VALID [2022-02-20 18:13:11,143 INFO L290 TraceCheckUtils]: 60: Hoare triple {152#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {152#false} is VALID [2022-02-20 18:13:11,143 INFO L290 TraceCheckUtils]: 61: Hoare triple {152#false} assume !false; {152#false} is VALID [2022-02-20 18:13:11,144 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:11,144 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:11,145 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [674868064] [2022-02-20 18:13:11,145 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [674868064] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:11,146 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:11,146 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:13:11,147 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1403875680] [2022-02-20 18:13:11,148 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:11,153 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 62 [2022-02-20 18:13:11,155 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:11,158 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:11,215 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:11,216 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:13:11,216 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:11,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:13:11,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:13:11,239 INFO L87 Difference]: Start difference. First operand has 148 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 120 states have internal predecessors, (141), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:11,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:11,460 INFO L93 Difference]: Finished difference Result 272 states and 376 transitions. [2022-02-20 18:13:11,460 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:13:11,460 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 62 [2022-02-20 18:13:11,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:11,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:11,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 376 transitions. [2022-02-20 18:13:11,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:11,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 376 transitions. [2022-02-20 18:13:11,510 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 376 transitions. [2022-02-20 18:13:11,815 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 376 edges. 376 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:11,832 INFO L225 Difference]: With dead ends: 272 [2022-02-20 18:13:11,832 INFO L226 Difference]: Without dead ends: 139 [2022-02-20 18:13:11,836 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:13:11,839 INFO L933 BasicCegarLoop]: 195 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:11,840 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 195 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:13:11,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2022-02-20 18:13:11,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 139. [2022-02-20 18:13:11,876 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:11,878 INFO L82 GeneralOperation]: Start isEquivalent. First operand 139 states. Second operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:13:11,879 INFO L74 IsIncluded]: Start isIncluded. First operand 139 states. Second operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:13:11,881 INFO L87 Difference]: Start difference. First operand 139 states. Second operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:13:11,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:11,893 INFO L93 Difference]: Finished difference Result 139 states and 186 transitions. [2022-02-20 18:13:11,893 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 186 transitions. [2022-02-20 18:13:11,895 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:11,896 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:11,897 INFO L74 IsIncluded]: Start isIncluded. First operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 139 states. [2022-02-20 18:13:11,898 INFO L87 Difference]: Start difference. First operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 139 states. [2022-02-20 18:13:11,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:11,909 INFO L93 Difference]: Finished difference Result 139 states and 186 transitions. [2022-02-20 18:13:11,909 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 186 transitions. [2022-02-20 18:13:11,912 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:11,912 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:11,912 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:11,912 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:11,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:13:11,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 186 transitions. [2022-02-20 18:13:11,927 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 186 transitions. Word has length 62 [2022-02-20 18:13:11,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:11,928 INFO L470 AbstractCegarLoop]: Abstraction has 139 states and 186 transitions. [2022-02-20 18:13:11,928 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:11,929 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 186 transitions. [2022-02-20 18:13:11,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-02-20 18:13:11,931 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:11,931 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:11,932 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:13:11,932 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:11,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:11,933 INFO L85 PathProgramCache]: Analyzing trace with hash -1003270502, now seen corresponding path program 1 times [2022-02-20 18:13:11,933 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:11,933 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [156315867] [2022-02-20 18:13:11,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:11,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:11,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:12,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,075 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,076 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,076 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1063#true} #370#return; {1063#true} is VALID [2022-02-20 18:13:12,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:12,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,082 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,082 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,083 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1063#true} #372#return; {1063#true} is VALID [2022-02-20 18:13:12,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:12,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,088 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,089 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,089 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1063#true} #374#return; {1063#true} is VALID [2022-02-20 18:13:12,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:12,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,094 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,095 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,095 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1063#true} #376#return; {1063#true} is VALID [2022-02-20 18:13:12,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:12,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,101 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,101 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,102 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1063#true} #378#return; {1063#true} is VALID [2022-02-20 18:13:12,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:12,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,108 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,108 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,108 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1063#true} #380#return; {1063#true} is VALID [2022-02-20 18:13:12,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-02-20 18:13:12,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,112 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1063#true} is VALID [2022-02-20 18:13:12,113 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,113 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1064#false} #352#return; {1064#false} is VALID [2022-02-20 18:13:12,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:13:12,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,117 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1063#true} is VALID [2022-02-20 18:13:12,117 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,117 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1063#true} {1064#false} #364#return; {1064#false} is VALID [2022-02-20 18:13:12,117 INFO L290 TraceCheckUtils]: 0: Hoare triple {1063#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {1063#true} is VALID [2022-02-20 18:13:12,118 INFO L290 TraceCheckUtils]: 1: Hoare triple {1063#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1063#true} is VALID [2022-02-20 18:13:12,118 INFO L290 TraceCheckUtils]: 2: Hoare triple {1063#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {1063#true} is VALID [2022-02-20 18:13:12,118 INFO L272 TraceCheckUtils]: 3: Hoare triple {1063#true} call select_features_#t~ret11#1 := select_one(); {1063#true} is VALID [2022-02-20 18:13:12,118 INFO L290 TraceCheckUtils]: 4: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,119 INFO L290 TraceCheckUtils]: 5: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,119 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1063#true} {1063#true} #370#return; {1063#true} is VALID [2022-02-20 18:13:12,119 INFO L290 TraceCheckUtils]: 7: Hoare triple {1063#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {1063#true} is VALID [2022-02-20 18:13:12,120 INFO L272 TraceCheckUtils]: 8: Hoare triple {1063#true} call select_features_#t~ret12#1 := select_one(); {1063#true} is VALID [2022-02-20 18:13:12,120 INFO L290 TraceCheckUtils]: 9: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,120 INFO L290 TraceCheckUtils]: 10: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,120 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1063#true} {1063#true} #372#return; {1063#true} is VALID [2022-02-20 18:13:12,121 INFO L290 TraceCheckUtils]: 12: Hoare triple {1063#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {1063#true} is VALID [2022-02-20 18:13:12,121 INFO L272 TraceCheckUtils]: 13: Hoare triple {1063#true} call select_features_#t~ret13#1 := select_one(); {1063#true} is VALID [2022-02-20 18:13:12,121 INFO L290 TraceCheckUtils]: 14: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,121 INFO L290 TraceCheckUtils]: 15: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,122 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1063#true} {1063#true} #374#return; {1063#true} is VALID [2022-02-20 18:13:12,122 INFO L290 TraceCheckUtils]: 17: Hoare triple {1063#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {1063#true} is VALID [2022-02-20 18:13:12,122 INFO L272 TraceCheckUtils]: 18: Hoare triple {1063#true} call select_features_#t~ret14#1 := select_one(); {1063#true} is VALID [2022-02-20 18:13:12,122 INFO L290 TraceCheckUtils]: 19: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,123 INFO L290 TraceCheckUtils]: 20: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,123 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1063#true} {1063#true} #376#return; {1063#true} is VALID [2022-02-20 18:13:12,123 INFO L290 TraceCheckUtils]: 22: Hoare triple {1063#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {1063#true} is VALID [2022-02-20 18:13:12,123 INFO L272 TraceCheckUtils]: 23: Hoare triple {1063#true} call select_features_#t~ret15#1 := select_one(); {1063#true} is VALID [2022-02-20 18:13:12,124 INFO L290 TraceCheckUtils]: 24: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,124 INFO L290 TraceCheckUtils]: 25: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,124 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1063#true} {1063#true} #378#return; {1063#true} is VALID [2022-02-20 18:13:12,124 INFO L290 TraceCheckUtils]: 27: Hoare triple {1063#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {1063#true} is VALID [2022-02-20 18:13:12,124 INFO L272 TraceCheckUtils]: 28: Hoare triple {1063#true} call select_features_#t~ret16#1 := select_one(); {1063#true} is VALID [2022-02-20 18:13:12,125 INFO L290 TraceCheckUtils]: 29: Hoare triple {1063#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1063#true} is VALID [2022-02-20 18:13:12,125 INFO L290 TraceCheckUtils]: 30: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,125 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1063#true} {1063#true} #380#return; {1063#true} is VALID [2022-02-20 18:13:12,125 INFO L290 TraceCheckUtils]: 32: Hoare triple {1063#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {1063#true} is VALID [2022-02-20 18:13:12,126 INFO L290 TraceCheckUtils]: 33: Hoare triple {1063#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {1063#true} is VALID [2022-02-20 18:13:12,126 INFO L290 TraceCheckUtils]: 34: Hoare triple {1063#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {1063#true} is VALID [2022-02-20 18:13:12,126 INFO L290 TraceCheckUtils]: 35: Hoare triple {1063#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1063#true} is VALID [2022-02-20 18:13:12,126 INFO L290 TraceCheckUtils]: 36: Hoare triple {1063#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1063#true} is VALID [2022-02-20 18:13:12,127 INFO L290 TraceCheckUtils]: 37: Hoare triple {1063#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1083#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:13:12,128 INFO L290 TraceCheckUtils]: 38: Hoare triple {1083#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {1083#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:13:12,128 INFO L290 TraceCheckUtils]: 39: Hoare triple {1083#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {1064#false} is VALID [2022-02-20 18:13:12,129 INFO L272 TraceCheckUtils]: 40: Hoare triple {1064#false} call cleanup(); {1064#false} is VALID [2022-02-20 18:13:12,129 INFO L290 TraceCheckUtils]: 41: Hoare triple {1064#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1064#false} is VALID [2022-02-20 18:13:12,129 INFO L272 TraceCheckUtils]: 42: Hoare triple {1064#false} call timeShift(); {1064#false} is VALID [2022-02-20 18:13:12,129 INFO L290 TraceCheckUtils]: 43: Hoare triple {1064#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {1064#false} is VALID [2022-02-20 18:13:12,130 INFO L272 TraceCheckUtils]: 44: Hoare triple {1064#false} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {1063#true} is VALID [2022-02-20 18:13:12,130 INFO L290 TraceCheckUtils]: 45: Hoare triple {1063#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1063#true} is VALID [2022-02-20 18:13:12,130 INFO L290 TraceCheckUtils]: 46: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,130 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {1063#true} {1064#false} #352#return; {1064#false} is VALID [2022-02-20 18:13:12,130 INFO L290 TraceCheckUtils]: 48: Hoare triple {1064#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {1064#false} is VALID [2022-02-20 18:13:12,131 INFO L290 TraceCheckUtils]: 49: Hoare triple {1064#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1064#false} is VALID [2022-02-20 18:13:12,131 INFO L290 TraceCheckUtils]: 50: Hoare triple {1064#false} assume !(0 != ~pumpRunning~0); {1064#false} is VALID [2022-02-20 18:13:12,131 INFO L290 TraceCheckUtils]: 51: Hoare triple {1064#false} assume !(0 != ~systemActive~0); {1064#false} is VALID [2022-02-20 18:13:12,131 INFO L290 TraceCheckUtils]: 52: Hoare triple {1064#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {1064#false} is VALID [2022-02-20 18:13:12,132 INFO L290 TraceCheckUtils]: 53: Hoare triple {1064#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {1064#false} is VALID [2022-02-20 18:13:12,132 INFO L290 TraceCheckUtils]: 54: Hoare triple {1064#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {1064#false} is VALID [2022-02-20 18:13:12,132 INFO L272 TraceCheckUtils]: 55: Hoare triple {1064#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {1063#true} is VALID [2022-02-20 18:13:12,132 INFO L290 TraceCheckUtils]: 56: Hoare triple {1063#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1063#true} is VALID [2022-02-20 18:13:12,132 INFO L290 TraceCheckUtils]: 57: Hoare triple {1063#true} assume true; {1063#true} is VALID [2022-02-20 18:13:12,133 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {1063#true} {1064#false} #364#return; {1064#false} is VALID [2022-02-20 18:13:12,133 INFO L290 TraceCheckUtils]: 59: Hoare triple {1064#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {1064#false} is VALID [2022-02-20 18:13:12,133 INFO L290 TraceCheckUtils]: 60: Hoare triple {1064#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {1064#false} is VALID [2022-02-20 18:13:12,133 INFO L290 TraceCheckUtils]: 61: Hoare triple {1064#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1064#false} is VALID [2022-02-20 18:13:12,134 INFO L290 TraceCheckUtils]: 62: Hoare triple {1064#false} assume !false; {1064#false} is VALID [2022-02-20 18:13:12,134 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:12,134 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:12,134 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [156315867] [2022-02-20 18:13:12,135 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [156315867] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:12,135 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:12,135 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:13:12,135 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2013750733] [2022-02-20 18:13:12,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:12,137 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-02-20 18:13:12,137 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:12,138 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:12,175 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:12,176 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:13:12,176 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:12,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:13:12,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:13:12,178 INFO L87 Difference]: Start difference. First operand 139 states and 186 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:12,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:12,375 INFO L93 Difference]: Finished difference Result 221 states and 296 transitions. [2022-02-20 18:13:12,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:13:12,376 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-02-20 18:13:12,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:12,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:12,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 296 transitions. [2022-02-20 18:13:12,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:12,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 296 transitions. [2022-02-20 18:13:12,388 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 296 transitions. [2022-02-20 18:13:12,608 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 296 edges. 296 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:12,612 INFO L225 Difference]: With dead ends: 221 [2022-02-20 18:13:12,613 INFO L226 Difference]: Without dead ends: 130 [2022-02-20 18:13:12,614 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:13:12,615 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 21 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:12,616 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 320 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:13:12,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2022-02-20 18:13:12,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 130. [2022-02-20 18:13:12,624 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:12,625 INFO L82 GeneralOperation]: Start isEquivalent. First operand 130 states. Second operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:13:12,626 INFO L74 IsIncluded]: Start isIncluded. First operand 130 states. Second operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:13:12,627 INFO L87 Difference]: Start difference. First operand 130 states. Second operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:13:12,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:12,632 INFO L93 Difference]: Finished difference Result 130 states and 174 transitions. [2022-02-20 18:13:12,632 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 174 transitions. [2022-02-20 18:13:12,633 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:12,634 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:12,634 INFO L74 IsIncluded]: Start isIncluded. First operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 130 states. [2022-02-20 18:13:12,635 INFO L87 Difference]: Start difference. First operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 130 states. [2022-02-20 18:13:12,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:12,640 INFO L93 Difference]: Finished difference Result 130 states and 174 transitions. [2022-02-20 18:13:12,641 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 174 transitions. [2022-02-20 18:13:12,641 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:12,641 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:12,642 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:12,642 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:12,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:13:12,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 174 transitions. [2022-02-20 18:13:12,648 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 174 transitions. Word has length 63 [2022-02-20 18:13:12,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:12,648 INFO L470 AbstractCegarLoop]: Abstraction has 130 states and 174 transitions. [2022-02-20 18:13:12,648 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:12,649 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 174 transitions. [2022-02-20 18:13:12,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-02-20 18:13:12,650 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:12,650 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:12,651 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:13:12,651 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:12,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:12,651 INFO L85 PathProgramCache]: Analyzing trace with hash 742899427, now seen corresponding path program 1 times [2022-02-20 18:13:12,652 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:12,652 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678861899] [2022-02-20 18:13:12,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:12,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:12,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:12,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,729 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,730 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #370#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:12,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,736 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,736 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,737 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #372#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:12,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,742 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,742 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,743 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #374#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:12,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,762 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,762 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,763 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #376#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:12,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,768 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,769 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,769 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #378#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:12,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,775 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,775 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,776 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #380#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:13:12,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,780 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1870#true} is VALID [2022-02-20 18:13:12,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,781 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #352#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:13:12,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:12,784 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1870#true} is VALID [2022-02-20 18:13:12,784 INFO L290 TraceCheckUtils]: 1: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,785 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1870#true} {1871#false} #364#return; {1871#false} is VALID [2022-02-20 18:13:12,787 INFO L290 TraceCheckUtils]: 0: Hoare triple {1870#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,788 INFO L290 TraceCheckUtils]: 1: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,788 INFO L290 TraceCheckUtils]: 2: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,788 INFO L272 TraceCheckUtils]: 3: Hoare triple {1872#(= 1 ~systemActive~0)} call select_features_#t~ret11#1 := select_one(); {1870#true} is VALID [2022-02-20 18:13:12,788 INFO L290 TraceCheckUtils]: 4: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,789 INFO L290 TraceCheckUtils]: 5: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,789 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #370#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,790 INFO L290 TraceCheckUtils]: 7: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,790 INFO L272 TraceCheckUtils]: 8: Hoare triple {1872#(= 1 ~systemActive~0)} call select_features_#t~ret12#1 := select_one(); {1870#true} is VALID [2022-02-20 18:13:12,790 INFO L290 TraceCheckUtils]: 9: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,790 INFO L290 TraceCheckUtils]: 10: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,791 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #372#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,791 INFO L290 TraceCheckUtils]: 12: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,792 INFO L272 TraceCheckUtils]: 13: Hoare triple {1872#(= 1 ~systemActive~0)} call select_features_#t~ret13#1 := select_one(); {1870#true} is VALID [2022-02-20 18:13:12,792 INFO L290 TraceCheckUtils]: 14: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,792 INFO L290 TraceCheckUtils]: 15: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,793 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #374#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,793 INFO L290 TraceCheckUtils]: 17: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,793 INFO L272 TraceCheckUtils]: 18: Hoare triple {1872#(= 1 ~systemActive~0)} call select_features_#t~ret14#1 := select_one(); {1870#true} is VALID [2022-02-20 18:13:12,794 INFO L290 TraceCheckUtils]: 19: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,794 INFO L290 TraceCheckUtils]: 20: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,794 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #376#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,795 INFO L290 TraceCheckUtils]: 22: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,795 INFO L272 TraceCheckUtils]: 23: Hoare triple {1872#(= 1 ~systemActive~0)} call select_features_#t~ret15#1 := select_one(); {1870#true} is VALID [2022-02-20 18:13:12,795 INFO L290 TraceCheckUtils]: 24: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,795 INFO L290 TraceCheckUtils]: 25: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,796 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #378#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,797 INFO L290 TraceCheckUtils]: 27: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,797 INFO L272 TraceCheckUtils]: 28: Hoare triple {1872#(= 1 ~systemActive~0)} call select_features_#t~ret16#1 := select_one(); {1870#true} is VALID [2022-02-20 18:13:12,797 INFO L290 TraceCheckUtils]: 29: Hoare triple {1870#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {1870#true} is VALID [2022-02-20 18:13:12,797 INFO L290 TraceCheckUtils]: 30: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,798 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #380#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,798 INFO L290 TraceCheckUtils]: 32: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,799 INFO L290 TraceCheckUtils]: 33: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,799 INFO L290 TraceCheckUtils]: 34: Hoare triple {1872#(= 1 ~systemActive~0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,800 INFO L290 TraceCheckUtils]: 35: Hoare triple {1872#(= 1 ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,800 INFO L290 TraceCheckUtils]: 36: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,800 INFO L290 TraceCheckUtils]: 37: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,801 INFO L290 TraceCheckUtils]: 38: Hoare triple {1872#(= 1 ~systemActive~0)} assume !false; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,801 INFO L290 TraceCheckUtils]: 39: Hoare triple {1872#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,802 INFO L290 TraceCheckUtils]: 40: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,802 INFO L290 TraceCheckUtils]: 41: Hoare triple {1872#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~4#1); {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,803 INFO L290 TraceCheckUtils]: 42: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,803 INFO L290 TraceCheckUtils]: 43: Hoare triple {1872#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~0#1); {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,803 INFO L290 TraceCheckUtils]: 44: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,804 INFO L290 TraceCheckUtils]: 45: Hoare triple {1872#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,804 INFO L290 TraceCheckUtils]: 46: Hoare triple {1872#(= 1 ~systemActive~0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,805 INFO L272 TraceCheckUtils]: 47: Hoare triple {1872#(= 1 ~systemActive~0)} call timeShift(); {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,805 INFO L290 TraceCheckUtils]: 48: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,805 INFO L272 TraceCheckUtils]: 49: Hoare triple {1872#(= 1 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {1870#true} is VALID [2022-02-20 18:13:12,805 INFO L290 TraceCheckUtils]: 50: Hoare triple {1870#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1870#true} is VALID [2022-02-20 18:13:12,806 INFO L290 TraceCheckUtils]: 51: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,806 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {1870#true} {1872#(= 1 ~systemActive~0)} #352#return; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,807 INFO L290 TraceCheckUtils]: 53: Hoare triple {1872#(= 1 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,807 INFO L290 TraceCheckUtils]: 54: Hoare triple {1872#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,807 INFO L290 TraceCheckUtils]: 55: Hoare triple {1872#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1872#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:12,808 INFO L290 TraceCheckUtils]: 56: Hoare triple {1872#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1871#false} is VALID [2022-02-20 18:13:12,808 INFO L290 TraceCheckUtils]: 57: Hoare triple {1871#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {1871#false} is VALID [2022-02-20 18:13:12,808 INFO L290 TraceCheckUtils]: 58: Hoare triple {1871#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {1871#false} is VALID [2022-02-20 18:13:12,808 INFO L290 TraceCheckUtils]: 59: Hoare triple {1871#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {1871#false} is VALID [2022-02-20 18:13:12,808 INFO L272 TraceCheckUtils]: 60: Hoare triple {1871#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {1870#true} is VALID [2022-02-20 18:13:12,809 INFO L290 TraceCheckUtils]: 61: Hoare triple {1870#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {1870#true} is VALID [2022-02-20 18:13:12,809 INFO L290 TraceCheckUtils]: 62: Hoare triple {1870#true} assume true; {1870#true} is VALID [2022-02-20 18:13:12,809 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {1870#true} {1871#false} #364#return; {1871#false} is VALID [2022-02-20 18:13:12,809 INFO L290 TraceCheckUtils]: 64: Hoare triple {1871#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {1871#false} is VALID [2022-02-20 18:13:12,809 INFO L290 TraceCheckUtils]: 65: Hoare triple {1871#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {1871#false} is VALID [2022-02-20 18:13:12,809 INFO L290 TraceCheckUtils]: 66: Hoare triple {1871#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1871#false} is VALID [2022-02-20 18:13:12,809 INFO L290 TraceCheckUtils]: 67: Hoare triple {1871#false} assume !false; {1871#false} is VALID [2022-02-20 18:13:12,810 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:12,810 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:12,810 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678861899] [2022-02-20 18:13:12,810 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678861899] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:12,811 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:12,811 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:13:12,811 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822097729] [2022-02-20 18:13:12,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:12,812 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 68 [2022-02-20 18:13:12,812 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:12,812 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:12,867 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:12,868 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:13:12,868 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:12,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:13:12,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:13:12,869 INFO L87 Difference]: Start difference. First operand 130 states and 174 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:13,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:13,112 INFO L93 Difference]: Finished difference Result 342 states and 465 transitions. [2022-02-20 18:13:13,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:13:13,113 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 68 [2022-02-20 18:13:13,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:13,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:13,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 465 transitions. [2022-02-20 18:13:13,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:13,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 465 transitions. [2022-02-20 18:13:13,131 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 465 transitions. [2022-02-20 18:13:13,512 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:13,519 INFO L225 Difference]: With dead ends: 342 [2022-02-20 18:13:13,519 INFO L226 Difference]: Without dead ends: 235 [2022-02-20 18:13:13,520 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:13:13,521 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 135 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:13,522 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [135 Valid, 349 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:13:13,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-02-20 18:13:13,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 232. [2022-02-20 18:13:13,539 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:13,540 INFO L82 GeneralOperation]: Start isEquivalent. First operand 235 states. Second operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:13:13,541 INFO L74 IsIncluded]: Start isIncluded. First operand 235 states. Second operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:13:13,542 INFO L87 Difference]: Start difference. First operand 235 states. Second operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:13:13,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:13,552 INFO L93 Difference]: Finished difference Result 235 states and 317 transitions. [2022-02-20 18:13:13,552 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 317 transitions. [2022-02-20 18:13:13,553 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:13,553 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:13,554 INFO L74 IsIncluded]: Start isIncluded. First operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 235 states. [2022-02-20 18:13:13,555 INFO L87 Difference]: Start difference. First operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 235 states. [2022-02-20 18:13:13,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:13,565 INFO L93 Difference]: Finished difference Result 235 states and 317 transitions. [2022-02-20 18:13:13,565 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 317 transitions. [2022-02-20 18:13:13,566 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:13,566 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:13,566 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:13,566 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:13,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:13:13,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 315 transitions. [2022-02-20 18:13:13,577 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 315 transitions. Word has length 68 [2022-02-20 18:13:13,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:13,579 INFO L470 AbstractCegarLoop]: Abstraction has 232 states and 315 transitions. [2022-02-20 18:13:13,579 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:13:13,579 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 315 transitions. [2022-02-20 18:13:13,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-02-20 18:13:13,581 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:13,582 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:13,582 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:13:13,582 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:13,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:13,583 INFO L85 PathProgramCache]: Analyzing trace with hash 999872991, now seen corresponding path program 1 times [2022-02-20 18:13:13,583 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:13,583 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726388037] [2022-02-20 18:13:13,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:13,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:13,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:13,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,725 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,726 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,726 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #370#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:13,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,731 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,732 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,732 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #372#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:13,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,737 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,737 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,738 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #374#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:13,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,742 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,742 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,743 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #376#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:13,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,747 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,748 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,748 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #378#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:13,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,753 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,754 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #380#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-02-20 18:13:13,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3208#true} is VALID [2022-02-20 18:13:13,758 INFO L290 TraceCheckUtils]: 1: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,758 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #352#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-02-20 18:13:13,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:13,767 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:13,768 INFO L290 TraceCheckUtils]: 1: Hoare triple {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:13,768 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} {3210#(= ~pumpRunning~0 0)} #364#return; {3235#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret61#1|)} is VALID [2022-02-20 18:13:13,769 INFO L290 TraceCheckUtils]: 0: Hoare triple {3208#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,769 INFO L290 TraceCheckUtils]: 1: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,769 INFO L290 TraceCheckUtils]: 2: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,770 INFO L272 TraceCheckUtils]: 3: Hoare triple {3210#(= ~pumpRunning~0 0)} call select_features_#t~ret11#1 := select_one(); {3208#true} is VALID [2022-02-20 18:13:13,770 INFO L290 TraceCheckUtils]: 4: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,770 INFO L290 TraceCheckUtils]: 5: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,771 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #370#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,771 INFO L290 TraceCheckUtils]: 7: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,771 INFO L272 TraceCheckUtils]: 8: Hoare triple {3210#(= ~pumpRunning~0 0)} call select_features_#t~ret12#1 := select_one(); {3208#true} is VALID [2022-02-20 18:13:13,771 INFO L290 TraceCheckUtils]: 9: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,771 INFO L290 TraceCheckUtils]: 10: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,772 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #372#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,772 INFO L290 TraceCheckUtils]: 12: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,773 INFO L272 TraceCheckUtils]: 13: Hoare triple {3210#(= ~pumpRunning~0 0)} call select_features_#t~ret13#1 := select_one(); {3208#true} is VALID [2022-02-20 18:13:13,773 INFO L290 TraceCheckUtils]: 14: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,773 INFO L290 TraceCheckUtils]: 15: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,773 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #374#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,774 INFO L290 TraceCheckUtils]: 17: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,774 INFO L272 TraceCheckUtils]: 18: Hoare triple {3210#(= ~pumpRunning~0 0)} call select_features_#t~ret14#1 := select_one(); {3208#true} is VALID [2022-02-20 18:13:13,774 INFO L290 TraceCheckUtils]: 19: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,774 INFO L290 TraceCheckUtils]: 20: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,775 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #376#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,779 INFO L290 TraceCheckUtils]: 22: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,779 INFO L272 TraceCheckUtils]: 23: Hoare triple {3210#(= ~pumpRunning~0 0)} call select_features_#t~ret15#1 := select_one(); {3208#true} is VALID [2022-02-20 18:13:13,780 INFO L290 TraceCheckUtils]: 24: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,780 INFO L290 TraceCheckUtils]: 25: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,781 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #378#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,781 INFO L290 TraceCheckUtils]: 27: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,781 INFO L272 TraceCheckUtils]: 28: Hoare triple {3210#(= ~pumpRunning~0 0)} call select_features_#t~ret16#1 := select_one(); {3208#true} is VALID [2022-02-20 18:13:13,782 INFO L290 TraceCheckUtils]: 29: Hoare triple {3208#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {3208#true} is VALID [2022-02-20 18:13:13,782 INFO L290 TraceCheckUtils]: 30: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,782 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #380#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,783 INFO L290 TraceCheckUtils]: 32: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,783 INFO L290 TraceCheckUtils]: 33: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,783 INFO L290 TraceCheckUtils]: 34: Hoare triple {3210#(= ~pumpRunning~0 0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,785 INFO L290 TraceCheckUtils]: 35: Hoare triple {3210#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,785 INFO L290 TraceCheckUtils]: 36: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,785 INFO L290 TraceCheckUtils]: 37: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,786 INFO L290 TraceCheckUtils]: 38: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !false; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,791 INFO L290 TraceCheckUtils]: 39: Hoare triple {3210#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,791 INFO L290 TraceCheckUtils]: 40: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,793 INFO L290 TraceCheckUtils]: 41: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~4#1); {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,793 INFO L290 TraceCheckUtils]: 42: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,794 INFO L290 TraceCheckUtils]: 43: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~0#1); {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,794 INFO L290 TraceCheckUtils]: 44: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,794 INFO L290 TraceCheckUtils]: 45: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet43#1 && test_#t~nondet43#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet43#1;havoc test_#t~nondet43#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,795 INFO L290 TraceCheckUtils]: 46: Hoare triple {3210#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,795 INFO L290 TraceCheckUtils]: 47: Hoare triple {3210#(= ~pumpRunning~0 0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,796 INFO L290 TraceCheckUtils]: 48: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,796 INFO L290 TraceCheckUtils]: 49: Hoare triple {3210#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,796 INFO L290 TraceCheckUtils]: 50: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,797 INFO L272 TraceCheckUtils]: 51: Hoare triple {3210#(= ~pumpRunning~0 0)} call timeShift(); {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,797 INFO L290 TraceCheckUtils]: 52: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,798 INFO L272 TraceCheckUtils]: 53: Hoare triple {3210#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {3208#true} is VALID [2022-02-20 18:13:13,798 INFO L290 TraceCheckUtils]: 54: Hoare triple {3208#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3208#true} is VALID [2022-02-20 18:13:13,798 INFO L290 TraceCheckUtils]: 55: Hoare triple {3208#true} assume true; {3208#true} is VALID [2022-02-20 18:13:13,798 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {3208#true} {3210#(= ~pumpRunning~0 0)} #352#return; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,799 INFO L290 TraceCheckUtils]: 57: Hoare triple {3210#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,799 INFO L290 TraceCheckUtils]: 58: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,800 INFO L290 TraceCheckUtils]: 59: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,800 INFO L290 TraceCheckUtils]: 60: Hoare triple {3210#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,800 INFO L290 TraceCheckUtils]: 61: Hoare triple {3210#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,801 INFO L290 TraceCheckUtils]: 62: Hoare triple {3210#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,801 INFO L290 TraceCheckUtils]: 63: Hoare triple {3210#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {3210#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:13:13,801 INFO L272 TraceCheckUtils]: 64: Hoare triple {3210#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {3208#true} is VALID [2022-02-20 18:13:13,802 INFO L290 TraceCheckUtils]: 65: Hoare triple {3208#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:13,802 INFO L290 TraceCheckUtils]: 66: Hoare triple {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:13,803 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {3237#(= ~pumpRunning~0 |isPumpRunning_#res|)} {3210#(= ~pumpRunning~0 0)} #364#return; {3235#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret61#1|)} is VALID [2022-02-20 18:13:13,804 INFO L290 TraceCheckUtils]: 68: Hoare triple {3235#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret61#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {3236#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:13:13,804 INFO L290 TraceCheckUtils]: 69: Hoare triple {3236#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {3209#false} is VALID [2022-02-20 18:13:13,804 INFO L290 TraceCheckUtils]: 70: Hoare triple {3209#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {3209#false} is VALID [2022-02-20 18:13:13,804 INFO L290 TraceCheckUtils]: 71: Hoare triple {3209#false} assume !false; {3209#false} is VALID [2022-02-20 18:13:13,807 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-02-20 18:13:13,807 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:13,807 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726388037] [2022-02-20 18:13:13,807 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726388037] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:13,808 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:13,808 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:13:13,808 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [969511678] [2022-02-20 18:13:13,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:13,809 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 72 [2022-02-20 18:13:13,810 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:13,810 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:13:13,854 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:13,854 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:13:13,854 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:13,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:13:13,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:13:13,855 INFO L87 Difference]: Start difference. First operand 232 states and 315 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:13:14,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:14,473 INFO L93 Difference]: Finished difference Result 582 states and 820 transitions. [2022-02-20 18:13:14,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:13:14,473 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 72 [2022-02-20 18:13:14,474 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:14,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:13:14,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 430 transitions. [2022-02-20 18:13:14,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:13:14,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 430 transitions. [2022-02-20 18:13:14,487 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 430 transitions. [2022-02-20 18:13:14,816 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 430 edges. 430 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:14,829 INFO L225 Difference]: With dead ends: 582 [2022-02-20 18:13:14,829 INFO L226 Difference]: Without dead ends: 373 [2022-02-20 18:13:14,830 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:13:14,831 INFO L933 BasicCegarLoop]: 190 mSDtfsCounter, 98 mSDsluCounter, 609 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 799 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:14,832 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [99 Valid, 799 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:13:14,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2022-02-20 18:13:14,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 360. [2022-02-20 18:13:14,854 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:14,856 INFO L82 GeneralOperation]: Start isEquivalent. First operand 373 states. Second operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:13:14,857 INFO L74 IsIncluded]: Start isIncluded. First operand 373 states. Second operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:13:14,858 INFO L87 Difference]: Start difference. First operand 373 states. Second operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:13:14,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:14,874 INFO L93 Difference]: Finished difference Result 373 states and 505 transitions. [2022-02-20 18:13:14,874 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 505 transitions. [2022-02-20 18:13:14,875 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:14,875 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:14,877 INFO L74 IsIncluded]: Start isIncluded. First operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) Second operand 373 states. [2022-02-20 18:13:14,878 INFO L87 Difference]: Start difference. First operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) Second operand 373 states. [2022-02-20 18:13:14,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:14,892 INFO L93 Difference]: Finished difference Result 373 states and 505 transitions. [2022-02-20 18:13:14,892 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 505 transitions. [2022-02-20 18:13:14,893 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:14,893 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:14,893 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:14,893 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:14,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:13:14,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 360 states and 488 transitions. [2022-02-20 18:13:14,914 INFO L78 Accepts]: Start accepts. Automaton has 360 states and 488 transitions. Word has length 72 [2022-02-20 18:13:14,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:14,914 INFO L470 AbstractCegarLoop]: Abstraction has 360 states and 488 transitions. [2022-02-20 18:13:14,915 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:13:14,915 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 488 transitions. [2022-02-20 18:13:14,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-02-20 18:13:14,916 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:14,916 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:14,916 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:13:14,916 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:14,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:14,917 INFO L85 PathProgramCache]: Analyzing trace with hash 997919659, now seen corresponding path program 1 times [2022-02-20 18:13:14,917 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:14,917 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1303652405] [2022-02-20 18:13:14,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:14,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:14,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:15,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,006 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,006 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,007 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #370#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:15,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,012 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,012 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,013 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #372#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:15,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,022 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,022 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,022 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #374#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:15,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,027 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,028 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,028 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #376#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:15,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,034 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,034 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,038 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #378#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:15,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,045 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,045 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,046 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #380#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:13:15,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,050 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5360#true} is VALID [2022-02-20 18:13:15,050 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,050 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #352#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:13:15,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:15,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:15,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,091 INFO L290 TraceCheckUtils]: 0: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5360#true} is VALID [2022-02-20 18:13:15,093 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,093 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5361#false} #344#return; {5361#false} is VALID [2022-02-20 18:13:15,093 INFO L290 TraceCheckUtils]: 0: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {5360#true} is VALID [2022-02-20 18:13:15,094 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5360#true} is VALID [2022-02-20 18:13:15,095 INFO L290 TraceCheckUtils]: 2: Hoare triple {5360#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5426#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)} is VALID [2022-02-20 18:13:15,096 INFO L290 TraceCheckUtils]: 3: Hoare triple {5426#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {5427#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 0)} is VALID [2022-02-20 18:13:15,096 INFO L290 TraceCheckUtils]: 4: Hoare triple {5427#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5361#false} is VALID [2022-02-20 18:13:15,096 INFO L290 TraceCheckUtils]: 5: Hoare triple {5361#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5361#false} is VALID [2022-02-20 18:13:15,096 INFO L290 TraceCheckUtils]: 6: Hoare triple {5361#false} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {5361#false} is VALID [2022-02-20 18:13:15,097 INFO L290 TraceCheckUtils]: 7: Hoare triple {5361#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {5361#false} is VALID [2022-02-20 18:13:15,097 INFO L290 TraceCheckUtils]: 8: Hoare triple {5361#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5361#false} is VALID [2022-02-20 18:13:15,098 INFO L272 TraceCheckUtils]: 9: Hoare triple {5361#false} call activatePump__before__methaneQuery(); {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:15,098 INFO L290 TraceCheckUtils]: 10: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5360#true} is VALID [2022-02-20 18:13:15,098 INFO L290 TraceCheckUtils]: 11: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,098 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {5360#true} {5361#false} #344#return; {5361#false} is VALID [2022-02-20 18:13:15,098 INFO L290 TraceCheckUtils]: 13: Hoare triple {5361#false} assume { :end_inline_activatePump } true; {5361#false} is VALID [2022-02-20 18:13:15,098 INFO L290 TraceCheckUtils]: 14: Hoare triple {5361#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5361#false} is VALID [2022-02-20 18:13:15,098 INFO L290 TraceCheckUtils]: 15: Hoare triple {5361#false} assume true; {5361#false} is VALID [2022-02-20 18:13:15,099 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5361#false} {5360#true} #398#return; {5361#false} is VALID [2022-02-20 18:13:15,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {5360#true} is VALID [2022-02-20 18:13:15,100 INFO L272 TraceCheckUtils]: 1: Hoare triple {5360#true} call processEnvironment__before__lowWaterSensor(); {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:15,100 INFO L290 TraceCheckUtils]: 2: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {5360#true} is VALID [2022-02-20 18:13:15,100 INFO L290 TraceCheckUtils]: 3: Hoare triple {5360#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5360#true} is VALID [2022-02-20 18:13:15,100 INFO L290 TraceCheckUtils]: 4: Hoare triple {5360#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5426#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)} is VALID [2022-02-20 18:13:15,101 INFO L290 TraceCheckUtils]: 5: Hoare triple {5426#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {5427#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 0)} is VALID [2022-02-20 18:13:15,101 INFO L290 TraceCheckUtils]: 6: Hoare triple {5427#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5361#false} is VALID [2022-02-20 18:13:15,101 INFO L290 TraceCheckUtils]: 7: Hoare triple {5361#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5361#false} is VALID [2022-02-20 18:13:15,101 INFO L290 TraceCheckUtils]: 8: Hoare triple {5361#false} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {5361#false} is VALID [2022-02-20 18:13:15,101 INFO L290 TraceCheckUtils]: 9: Hoare triple {5361#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {5361#false} is VALID [2022-02-20 18:13:15,101 INFO L290 TraceCheckUtils]: 10: Hoare triple {5361#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5361#false} is VALID [2022-02-20 18:13:15,102 INFO L272 TraceCheckUtils]: 11: Hoare triple {5361#false} call activatePump__before__methaneQuery(); {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:15,102 INFO L290 TraceCheckUtils]: 12: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5360#true} is VALID [2022-02-20 18:13:15,102 INFO L290 TraceCheckUtils]: 13: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,102 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {5360#true} {5361#false} #344#return; {5361#false} is VALID [2022-02-20 18:13:15,102 INFO L290 TraceCheckUtils]: 15: Hoare triple {5361#false} assume { :end_inline_activatePump } true; {5361#false} is VALID [2022-02-20 18:13:15,103 INFO L290 TraceCheckUtils]: 16: Hoare triple {5361#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5361#false} is VALID [2022-02-20 18:13:15,103 INFO L290 TraceCheckUtils]: 17: Hoare triple {5361#false} assume true; {5361#false} is VALID [2022-02-20 18:13:15,103 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {5361#false} {5360#true} #398#return; {5361#false} is VALID [2022-02-20 18:13:15,103 INFO L290 TraceCheckUtils]: 19: Hoare triple {5361#false} assume true; {5361#false} is VALID [2022-02-20 18:13:15,103 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {5361#false} {5362#(= ~waterLevel~0 1)} #362#return; {5361#false} is VALID [2022-02-20 18:13:15,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-02-20 18:13:15,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:15,110 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5360#true} is VALID [2022-02-20 18:13:15,110 INFO L290 TraceCheckUtils]: 1: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,110 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5360#true} {5361#false} #364#return; {5361#false} is VALID [2022-02-20 18:13:15,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {5360#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,111 INFO L290 TraceCheckUtils]: 2: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,111 INFO L272 TraceCheckUtils]: 3: Hoare triple {5362#(= ~waterLevel~0 1)} call select_features_#t~ret11#1 := select_one(); {5360#true} is VALID [2022-02-20 18:13:15,112 INFO L290 TraceCheckUtils]: 4: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,112 INFO L290 TraceCheckUtils]: 5: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,112 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #370#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,112 INFO L290 TraceCheckUtils]: 7: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,113 INFO L272 TraceCheckUtils]: 8: Hoare triple {5362#(= ~waterLevel~0 1)} call select_features_#t~ret12#1 := select_one(); {5360#true} is VALID [2022-02-20 18:13:15,113 INFO L290 TraceCheckUtils]: 9: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,113 INFO L290 TraceCheckUtils]: 10: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,113 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #372#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,114 INFO L290 TraceCheckUtils]: 12: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,114 INFO L272 TraceCheckUtils]: 13: Hoare triple {5362#(= ~waterLevel~0 1)} call select_features_#t~ret13#1 := select_one(); {5360#true} is VALID [2022-02-20 18:13:15,114 INFO L290 TraceCheckUtils]: 14: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,114 INFO L290 TraceCheckUtils]: 15: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,114 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #374#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,115 INFO L290 TraceCheckUtils]: 17: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,115 INFO L272 TraceCheckUtils]: 18: Hoare triple {5362#(= ~waterLevel~0 1)} call select_features_#t~ret14#1 := select_one(); {5360#true} is VALID [2022-02-20 18:13:15,115 INFO L290 TraceCheckUtils]: 19: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,115 INFO L290 TraceCheckUtils]: 20: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,116 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #376#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,116 INFO L290 TraceCheckUtils]: 22: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,116 INFO L272 TraceCheckUtils]: 23: Hoare triple {5362#(= ~waterLevel~0 1)} call select_features_#t~ret15#1 := select_one(); {5360#true} is VALID [2022-02-20 18:13:15,116 INFO L290 TraceCheckUtils]: 24: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,116 INFO L290 TraceCheckUtils]: 25: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,117 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #378#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,117 INFO L290 TraceCheckUtils]: 27: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,117 INFO L272 TraceCheckUtils]: 28: Hoare triple {5362#(= ~waterLevel~0 1)} call select_features_#t~ret16#1 := select_one(); {5360#true} is VALID [2022-02-20 18:13:15,117 INFO L290 TraceCheckUtils]: 29: Hoare triple {5360#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {5360#true} is VALID [2022-02-20 18:13:15,117 INFO L290 TraceCheckUtils]: 30: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,118 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #380#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,118 INFO L290 TraceCheckUtils]: 32: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,119 INFO L290 TraceCheckUtils]: 33: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,119 INFO L290 TraceCheckUtils]: 34: Hoare triple {5362#(= ~waterLevel~0 1)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,119 INFO L290 TraceCheckUtils]: 35: Hoare triple {5362#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,120 INFO L290 TraceCheckUtils]: 36: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,120 INFO L290 TraceCheckUtils]: 37: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,120 INFO L290 TraceCheckUtils]: 38: Hoare triple {5362#(= ~waterLevel~0 1)} assume !false; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,121 INFO L290 TraceCheckUtils]: 39: Hoare triple {5362#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,121 INFO L290 TraceCheckUtils]: 40: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,121 INFO L290 TraceCheckUtils]: 41: Hoare triple {5362#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~4#1); {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,122 INFO L290 TraceCheckUtils]: 42: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,122 INFO L290 TraceCheckUtils]: 43: Hoare triple {5362#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0#1); {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,122 INFO L290 TraceCheckUtils]: 44: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,122 INFO L290 TraceCheckUtils]: 45: Hoare triple {5362#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,123 INFO L290 TraceCheckUtils]: 46: Hoare triple {5362#(= ~waterLevel~0 1)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,123 INFO L272 TraceCheckUtils]: 47: Hoare triple {5362#(= ~waterLevel~0 1)} call timeShift(); {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,123 INFO L290 TraceCheckUtils]: 48: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,124 INFO L272 TraceCheckUtils]: 49: Hoare triple {5362#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {5360#true} is VALID [2022-02-20 18:13:15,124 INFO L290 TraceCheckUtils]: 50: Hoare triple {5360#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5360#true} is VALID [2022-02-20 18:13:15,124 INFO L290 TraceCheckUtils]: 51: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,124 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {5360#true} {5362#(= ~waterLevel~0 1)} #352#return; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,125 INFO L290 TraceCheckUtils]: 53: Hoare triple {5362#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,125 INFO L290 TraceCheckUtils]: 54: Hoare triple {5362#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,125 INFO L290 TraceCheckUtils]: 55: Hoare triple {5362#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,126 INFO L290 TraceCheckUtils]: 56: Hoare triple {5362#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,126 INFO L290 TraceCheckUtils]: 57: Hoare triple {5362#(= ~waterLevel~0 1)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {5362#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:15,126 INFO L272 TraceCheckUtils]: 58: Hoare triple {5362#(= ~waterLevel~0 1)} call processEnvironment__before__methaneAlarm(); {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:15,126 INFO L290 TraceCheckUtils]: 59: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {5360#true} is VALID [2022-02-20 18:13:15,127 INFO L272 TraceCheckUtils]: 60: Hoare triple {5360#true} call processEnvironment__before__lowWaterSensor(); {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:15,127 INFO L290 TraceCheckUtils]: 61: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {5360#true} is VALID [2022-02-20 18:13:15,127 INFO L290 TraceCheckUtils]: 62: Hoare triple {5360#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5360#true} is VALID [2022-02-20 18:13:15,128 INFO L290 TraceCheckUtils]: 63: Hoare triple {5360#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5426#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)} is VALID [2022-02-20 18:13:15,128 INFO L290 TraceCheckUtils]: 64: Hoare triple {5426#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {5427#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 0)} is VALID [2022-02-20 18:13:15,128 INFO L290 TraceCheckUtils]: 65: Hoare triple {5427#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5361#false} is VALID [2022-02-20 18:13:15,128 INFO L290 TraceCheckUtils]: 66: Hoare triple {5361#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5361#false} is VALID [2022-02-20 18:13:15,129 INFO L290 TraceCheckUtils]: 67: Hoare triple {5361#false} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {5361#false} is VALID [2022-02-20 18:13:15,129 INFO L290 TraceCheckUtils]: 68: Hoare triple {5361#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {5361#false} is VALID [2022-02-20 18:13:15,129 INFO L290 TraceCheckUtils]: 69: Hoare triple {5361#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5361#false} is VALID [2022-02-20 18:13:15,130 INFO L272 TraceCheckUtils]: 70: Hoare triple {5361#false} call activatePump__before__methaneQuery(); {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:15,130 INFO L290 TraceCheckUtils]: 71: Hoare triple {5408#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5360#true} is VALID [2022-02-20 18:13:15,130 INFO L290 TraceCheckUtils]: 72: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,130 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {5360#true} {5361#false} #344#return; {5361#false} is VALID [2022-02-20 18:13:15,130 INFO L290 TraceCheckUtils]: 74: Hoare triple {5361#false} assume { :end_inline_activatePump } true; {5361#false} is VALID [2022-02-20 18:13:15,130 INFO L290 TraceCheckUtils]: 75: Hoare triple {5361#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5361#false} is VALID [2022-02-20 18:13:15,130 INFO L290 TraceCheckUtils]: 76: Hoare triple {5361#false} assume true; {5361#false} is VALID [2022-02-20 18:13:15,130 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {5361#false} {5360#true} #398#return; {5361#false} is VALID [2022-02-20 18:13:15,131 INFO L290 TraceCheckUtils]: 78: Hoare triple {5361#false} assume true; {5361#false} is VALID [2022-02-20 18:13:15,131 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {5361#false} {5362#(= ~waterLevel~0 1)} #362#return; {5361#false} is VALID [2022-02-20 18:13:15,132 INFO L290 TraceCheckUtils]: 80: Hoare triple {5361#false} assume { :end_inline_processEnvironment } true; {5361#false} is VALID [2022-02-20 18:13:15,132 INFO L290 TraceCheckUtils]: 81: Hoare triple {5361#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {5361#false} is VALID [2022-02-20 18:13:15,132 INFO L290 TraceCheckUtils]: 82: Hoare triple {5361#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {5361#false} is VALID [2022-02-20 18:13:15,132 INFO L290 TraceCheckUtils]: 83: Hoare triple {5361#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {5361#false} is VALID [2022-02-20 18:13:15,135 INFO L272 TraceCheckUtils]: 84: Hoare triple {5361#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {5360#true} is VALID [2022-02-20 18:13:15,135 INFO L290 TraceCheckUtils]: 85: Hoare triple {5360#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {5360#true} is VALID [2022-02-20 18:13:15,135 INFO L290 TraceCheckUtils]: 86: Hoare triple {5360#true} assume true; {5360#true} is VALID [2022-02-20 18:13:15,135 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {5360#true} {5361#false} #364#return; {5361#false} is VALID [2022-02-20 18:13:15,135 INFO L290 TraceCheckUtils]: 88: Hoare triple {5361#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {5361#false} is VALID [2022-02-20 18:13:15,136 INFO L290 TraceCheckUtils]: 89: Hoare triple {5361#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {5361#false} is VALID [2022-02-20 18:13:15,136 INFO L290 TraceCheckUtils]: 90: Hoare triple {5361#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {5361#false} is VALID [2022-02-20 18:13:15,136 INFO L290 TraceCheckUtils]: 91: Hoare triple {5361#false} assume !false; {5361#false} is VALID [2022-02-20 18:13:15,137 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:15,137 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:15,137 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1303652405] [2022-02-20 18:13:15,137 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1303652405] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:15,137 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:15,138 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:13:15,138 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [649480408] [2022-02-20 18:13:15,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:15,139 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) Word has length 92 [2022-02-20 18:13:15,139 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:15,140 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:13:15,196 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:15,196 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:13:15,196 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:15,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:13:15,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:13:15,197 INFO L87 Difference]: Start difference. First operand 360 states and 488 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:13:16,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:16,505 INFO L93 Difference]: Finished difference Result 1156 states and 1658 transitions. [2022-02-20 18:13:16,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-20 18:13:16,505 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) Word has length 92 [2022-02-20 18:13:16,505 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:16,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:13:16,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 600 transitions. [2022-02-20 18:13:16,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:13:16,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 600 transitions. [2022-02-20 18:13:16,522 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 600 transitions. [2022-02-20 18:13:17,015 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 600 edges. 600 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:17,068 INFO L225 Difference]: With dead ends: 1156 [2022-02-20 18:13:17,068 INFO L226 Difference]: Without dead ends: 819 [2022-02-20 18:13:17,071 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 26 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:13:17,077 INFO L933 BasicCegarLoop]: 206 mSDtfsCounter, 300 mSDsluCounter, 508 mSDsCounter, 0 mSdLazyCounter, 295 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 714 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:17,078 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [309 Valid, 714 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 295 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-02-20 18:13:17,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 819 states. [2022-02-20 18:13:17,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 819 to 690. [2022-02-20 18:13:17,126 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:17,129 INFO L82 GeneralOperation]: Start isEquivalent. First operand 819 states. Second operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:17,131 INFO L74 IsIncluded]: Start isIncluded. First operand 819 states. Second operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:17,134 INFO L87 Difference]: Start difference. First operand 819 states. Second operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:17,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:17,178 INFO L93 Difference]: Finished difference Result 819 states and 1120 transitions. [2022-02-20 18:13:17,178 INFO L276 IsEmpty]: Start isEmpty. Operand 819 states and 1120 transitions. [2022-02-20 18:13:17,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:17,183 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:17,185 INFO L74 IsIncluded]: Start isIncluded. First operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) Second operand 819 states. [2022-02-20 18:13:17,187 INFO L87 Difference]: Start difference. First operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) Second operand 819 states. [2022-02-20 18:13:17,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:17,230 INFO L93 Difference]: Finished difference Result 819 states and 1120 transitions. [2022-02-20 18:13:17,230 INFO L276 IsEmpty]: Start isEmpty. Operand 819 states and 1120 transitions. [2022-02-20 18:13:17,234 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:17,234 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:17,234 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:17,234 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:17,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:17,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 690 states to 690 states and 922 transitions. [2022-02-20 18:13:17,285 INFO L78 Accepts]: Start accepts. Automaton has 690 states and 922 transitions. Word has length 92 [2022-02-20 18:13:17,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:17,285 INFO L470 AbstractCegarLoop]: Abstraction has 690 states and 922 transitions. [2022-02-20 18:13:17,286 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:13:17,286 INFO L276 IsEmpty]: Start isEmpty. Operand 690 states and 922 transitions. [2022-02-20 18:13:17,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-02-20 18:13:17,288 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:17,288 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:17,288 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:13:17,289 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:17,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:17,289 INFO L85 PathProgramCache]: Analyzing trace with hash -388283735, now seen corresponding path program 1 times [2022-02-20 18:13:17,290 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:17,290 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121788915] [2022-02-20 18:13:17,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:17,291 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:17,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:17,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,379 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,380 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,380 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #370#return; {9763#true} is VALID [2022-02-20 18:13:17,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:17,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,384 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,384 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,385 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #372#return; {9763#true} is VALID [2022-02-20 18:13:17,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:17,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,390 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,390 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,390 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #374#return; {9763#true} is VALID [2022-02-20 18:13:17,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:17,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,397 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,397 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,397 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #376#return; {9763#true} is VALID [2022-02-20 18:13:17,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:17,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,408 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,408 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,408 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #378#return; {9763#true} is VALID [2022-02-20 18:13:17,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:17,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,414 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,414 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,415 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #380#return; {9763#true} is VALID [2022-02-20 18:13:17,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:13:17,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,421 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9763#true} is VALID [2022-02-20 18:13:17,421 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,421 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9763#true} #352#return; {9763#true} is VALID [2022-02-20 18:13:17,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:13:17,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:17,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:17,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,473 INFO L290 TraceCheckUtils]: 0: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {9763#true} is VALID [2022-02-20 18:13:17,474 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,474 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9764#false} #344#return; {9764#false} is VALID [2022-02-20 18:13:17,474 INFO L290 TraceCheckUtils]: 0: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {9763#true} is VALID [2022-02-20 18:13:17,474 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {9763#true} is VALID [2022-02-20 18:13:17,474 INFO L290 TraceCheckUtils]: 2: Hoare triple {9763#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9763#true} is VALID [2022-02-20 18:13:17,474 INFO L290 TraceCheckUtils]: 3: Hoare triple {9763#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {9763#true} is VALID [2022-02-20 18:13:17,475 INFO L290 TraceCheckUtils]: 4: Hoare triple {9763#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~1#1 := 0; {9828#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:13:17,475 INFO L290 TraceCheckUtils]: 5: Hoare triple {9828#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9829#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:13:17,476 INFO L290 TraceCheckUtils]: 6: Hoare triple {9829#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {9830#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)} is VALID [2022-02-20 18:13:17,476 INFO L290 TraceCheckUtils]: 7: Hoare triple {9830#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {9764#false} is VALID [2022-02-20 18:13:17,476 INFO L290 TraceCheckUtils]: 8: Hoare triple {9764#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {9764#false} is VALID [2022-02-20 18:13:17,477 INFO L272 TraceCheckUtils]: 9: Hoare triple {9764#false} call activatePump__before__methaneQuery(); {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:17,477 INFO L290 TraceCheckUtils]: 10: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {9763#true} is VALID [2022-02-20 18:13:17,477 INFO L290 TraceCheckUtils]: 11: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,477 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {9763#true} {9764#false} #344#return; {9764#false} is VALID [2022-02-20 18:13:17,477 INFO L290 TraceCheckUtils]: 13: Hoare triple {9764#false} assume { :end_inline_activatePump } true; {9764#false} is VALID [2022-02-20 18:13:17,477 INFO L290 TraceCheckUtils]: 14: Hoare triple {9764#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {9764#false} is VALID [2022-02-20 18:13:17,478 INFO L290 TraceCheckUtils]: 15: Hoare triple {9764#false} assume true; {9764#false} is VALID [2022-02-20 18:13:17,478 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9764#false} {9763#true} #398#return; {9764#false} is VALID [2022-02-20 18:13:17,478 INFO L290 TraceCheckUtils]: 0: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {9763#true} is VALID [2022-02-20 18:13:17,479 INFO L272 TraceCheckUtils]: 1: Hoare triple {9763#true} call processEnvironment__before__lowWaterSensor(); {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:17,479 INFO L290 TraceCheckUtils]: 2: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {9763#true} is VALID [2022-02-20 18:13:17,479 INFO L290 TraceCheckUtils]: 3: Hoare triple {9763#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {9763#true} is VALID [2022-02-20 18:13:17,479 INFO L290 TraceCheckUtils]: 4: Hoare triple {9763#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9763#true} is VALID [2022-02-20 18:13:17,479 INFO L290 TraceCheckUtils]: 5: Hoare triple {9763#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {9763#true} is VALID [2022-02-20 18:13:17,480 INFO L290 TraceCheckUtils]: 6: Hoare triple {9763#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~1#1 := 0; {9828#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:13:17,480 INFO L290 TraceCheckUtils]: 7: Hoare triple {9828#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9829#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:13:17,480 INFO L290 TraceCheckUtils]: 8: Hoare triple {9829#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {9830#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)} is VALID [2022-02-20 18:13:17,481 INFO L290 TraceCheckUtils]: 9: Hoare triple {9830#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {9764#false} is VALID [2022-02-20 18:13:17,481 INFO L290 TraceCheckUtils]: 10: Hoare triple {9764#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {9764#false} is VALID [2022-02-20 18:13:17,481 INFO L272 TraceCheckUtils]: 11: Hoare triple {9764#false} call activatePump__before__methaneQuery(); {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:17,481 INFO L290 TraceCheckUtils]: 12: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {9763#true} is VALID [2022-02-20 18:13:17,481 INFO L290 TraceCheckUtils]: 13: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,482 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {9763#true} {9764#false} #344#return; {9764#false} is VALID [2022-02-20 18:13:17,482 INFO L290 TraceCheckUtils]: 15: Hoare triple {9764#false} assume { :end_inline_activatePump } true; {9764#false} is VALID [2022-02-20 18:13:17,482 INFO L290 TraceCheckUtils]: 16: Hoare triple {9764#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {9764#false} is VALID [2022-02-20 18:13:17,482 INFO L290 TraceCheckUtils]: 17: Hoare triple {9764#false} assume true; {9764#false} is VALID [2022-02-20 18:13:17,482 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {9764#false} {9763#true} #398#return; {9764#false} is VALID [2022-02-20 18:13:17,482 INFO L290 TraceCheckUtils]: 19: Hoare triple {9764#false} assume true; {9764#false} is VALID [2022-02-20 18:13:17,483 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {9764#false} {9763#true} #362#return; {9764#false} is VALID [2022-02-20 18:13:17,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-02-20 18:13:17,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:17,486 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9763#true} is VALID [2022-02-20 18:13:17,486 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,486 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9763#true} {9764#false} #364#return; {9764#false} is VALID [2022-02-20 18:13:17,486 INFO L290 TraceCheckUtils]: 0: Hoare triple {9763#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {9763#true} is VALID [2022-02-20 18:13:17,486 INFO L290 TraceCheckUtils]: 1: Hoare triple {9763#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {9763#true} is VALID [2022-02-20 18:13:17,487 INFO L290 TraceCheckUtils]: 2: Hoare triple {9763#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {9763#true} is VALID [2022-02-20 18:13:17,487 INFO L272 TraceCheckUtils]: 3: Hoare triple {9763#true} call select_features_#t~ret11#1 := select_one(); {9763#true} is VALID [2022-02-20 18:13:17,487 INFO L290 TraceCheckUtils]: 4: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,487 INFO L290 TraceCheckUtils]: 5: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,487 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {9763#true} {9763#true} #370#return; {9763#true} is VALID [2022-02-20 18:13:17,487 INFO L290 TraceCheckUtils]: 7: Hoare triple {9763#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {9763#true} is VALID [2022-02-20 18:13:17,488 INFO L272 TraceCheckUtils]: 8: Hoare triple {9763#true} call select_features_#t~ret12#1 := select_one(); {9763#true} is VALID [2022-02-20 18:13:17,488 INFO L290 TraceCheckUtils]: 9: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,488 INFO L290 TraceCheckUtils]: 10: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,488 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {9763#true} {9763#true} #372#return; {9763#true} is VALID [2022-02-20 18:13:17,488 INFO L290 TraceCheckUtils]: 12: Hoare triple {9763#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {9763#true} is VALID [2022-02-20 18:13:17,488 INFO L272 TraceCheckUtils]: 13: Hoare triple {9763#true} call select_features_#t~ret13#1 := select_one(); {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L290 TraceCheckUtils]: 14: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L290 TraceCheckUtils]: 15: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9763#true} {9763#true} #374#return; {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L290 TraceCheckUtils]: 17: Hoare triple {9763#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L272 TraceCheckUtils]: 18: Hoare triple {9763#true} call select_features_#t~ret14#1 := select_one(); {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L290 TraceCheckUtils]: 19: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,489 INFO L290 TraceCheckUtils]: 20: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {9763#true} {9763#true} #376#return; {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L290 TraceCheckUtils]: 22: Hoare triple {9763#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L272 TraceCheckUtils]: 23: Hoare triple {9763#true} call select_features_#t~ret15#1 := select_one(); {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L290 TraceCheckUtils]: 24: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L290 TraceCheckUtils]: 25: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {9763#true} {9763#true} #378#return; {9763#true} is VALID [2022-02-20 18:13:17,490 INFO L290 TraceCheckUtils]: 27: Hoare triple {9763#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {9763#true} is VALID [2022-02-20 18:13:17,491 INFO L272 TraceCheckUtils]: 28: Hoare triple {9763#true} call select_features_#t~ret16#1 := select_one(); {9763#true} is VALID [2022-02-20 18:13:17,491 INFO L290 TraceCheckUtils]: 29: Hoare triple {9763#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {9763#true} is VALID [2022-02-20 18:13:17,491 INFO L290 TraceCheckUtils]: 30: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,491 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {9763#true} {9763#true} #380#return; {9763#true} is VALID [2022-02-20 18:13:17,491 INFO L290 TraceCheckUtils]: 32: Hoare triple {9763#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {9763#true} is VALID [2022-02-20 18:13:17,491 INFO L290 TraceCheckUtils]: 33: Hoare triple {9763#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {9763#true} is VALID [2022-02-20 18:13:17,492 INFO L290 TraceCheckUtils]: 34: Hoare triple {9763#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {9763#true} is VALID [2022-02-20 18:13:17,492 INFO L290 TraceCheckUtils]: 35: Hoare triple {9763#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {9763#true} is VALID [2022-02-20 18:13:17,492 INFO L290 TraceCheckUtils]: 36: Hoare triple {9763#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {9763#true} is VALID [2022-02-20 18:13:17,492 INFO L290 TraceCheckUtils]: 37: Hoare triple {9763#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9763#true} is VALID [2022-02-20 18:13:17,493 INFO L290 TraceCheckUtils]: 38: Hoare triple {9763#true} assume !false; {9763#true} is VALID [2022-02-20 18:13:17,493 INFO L290 TraceCheckUtils]: 39: Hoare triple {9763#true} assume test_~splverifierCounter~0#1 < 4; {9763#true} is VALID [2022-02-20 18:13:17,493 INFO L290 TraceCheckUtils]: 40: Hoare triple {9763#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {9763#true} is VALID [2022-02-20 18:13:17,493 INFO L290 TraceCheckUtils]: 41: Hoare triple {9763#true} assume !(0 != test_~tmp~4#1); {9763#true} is VALID [2022-02-20 18:13:17,493 INFO L290 TraceCheckUtils]: 42: Hoare triple {9763#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L290 TraceCheckUtils]: 43: Hoare triple {9763#true} assume !(0 != test_~tmp___0~0#1); {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L290 TraceCheckUtils]: 44: Hoare triple {9763#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L290 TraceCheckUtils]: 45: Hoare triple {9763#true} assume 0 != test_~tmp___2~0#1; {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L290 TraceCheckUtils]: 46: Hoare triple {9763#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L272 TraceCheckUtils]: 47: Hoare triple {9763#true} call timeShift(); {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L290 TraceCheckUtils]: 48: Hoare triple {9763#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {9763#true} is VALID [2022-02-20 18:13:17,494 INFO L272 TraceCheckUtils]: 49: Hoare triple {9763#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {9763#true} is VALID [2022-02-20 18:13:17,495 INFO L290 TraceCheckUtils]: 50: Hoare triple {9763#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9763#true} is VALID [2022-02-20 18:13:17,495 INFO L290 TraceCheckUtils]: 51: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,495 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {9763#true} {9763#true} #352#return; {9763#true} is VALID [2022-02-20 18:13:17,495 INFO L290 TraceCheckUtils]: 53: Hoare triple {9763#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {9763#true} is VALID [2022-02-20 18:13:17,495 INFO L290 TraceCheckUtils]: 54: Hoare triple {9763#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {9763#true} is VALID [2022-02-20 18:13:17,495 INFO L290 TraceCheckUtils]: 55: Hoare triple {9763#true} assume !(0 != ~pumpRunning~0); {9763#true} is VALID [2022-02-20 18:13:17,496 INFO L290 TraceCheckUtils]: 56: Hoare triple {9763#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {9763#true} is VALID [2022-02-20 18:13:17,496 INFO L290 TraceCheckUtils]: 57: Hoare triple {9763#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {9763#true} is VALID [2022-02-20 18:13:17,496 INFO L272 TraceCheckUtils]: 58: Hoare triple {9763#true} call processEnvironment__before__methaneAlarm(); {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:17,496 INFO L290 TraceCheckUtils]: 59: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {9763#true} is VALID [2022-02-20 18:13:17,497 INFO L272 TraceCheckUtils]: 60: Hoare triple {9763#true} call processEnvironment__before__lowWaterSensor(); {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:17,497 INFO L290 TraceCheckUtils]: 61: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {9763#true} is VALID [2022-02-20 18:13:17,497 INFO L290 TraceCheckUtils]: 62: Hoare triple {9763#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {9763#true} is VALID [2022-02-20 18:13:17,497 INFO L290 TraceCheckUtils]: 63: Hoare triple {9763#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9763#true} is VALID [2022-02-20 18:13:17,497 INFO L290 TraceCheckUtils]: 64: Hoare triple {9763#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {9763#true} is VALID [2022-02-20 18:13:17,498 INFO L290 TraceCheckUtils]: 65: Hoare triple {9763#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~1#1 := 0; {9828#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:13:17,498 INFO L290 TraceCheckUtils]: 66: Hoare triple {9828#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9829#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:13:17,499 INFO L290 TraceCheckUtils]: 67: Hoare triple {9829#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {9830#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)} is VALID [2022-02-20 18:13:17,499 INFO L290 TraceCheckUtils]: 68: Hoare triple {9830#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {9764#false} is VALID [2022-02-20 18:13:17,499 INFO L290 TraceCheckUtils]: 69: Hoare triple {9764#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {9764#false} is VALID [2022-02-20 18:13:17,499 INFO L272 TraceCheckUtils]: 70: Hoare triple {9764#false} call activatePump__before__methaneQuery(); {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:17,500 INFO L290 TraceCheckUtils]: 71: Hoare triple {9810#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {9763#true} is VALID [2022-02-20 18:13:17,500 INFO L290 TraceCheckUtils]: 72: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,500 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {9763#true} {9764#false} #344#return; {9764#false} is VALID [2022-02-20 18:13:17,500 INFO L290 TraceCheckUtils]: 74: Hoare triple {9764#false} assume { :end_inline_activatePump } true; {9764#false} is VALID [2022-02-20 18:13:17,500 INFO L290 TraceCheckUtils]: 75: Hoare triple {9764#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {9764#false} is VALID [2022-02-20 18:13:17,500 INFO L290 TraceCheckUtils]: 76: Hoare triple {9764#false} assume true; {9764#false} is VALID [2022-02-20 18:13:17,500 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {9764#false} {9763#true} #398#return; {9764#false} is VALID [2022-02-20 18:13:17,501 INFO L290 TraceCheckUtils]: 78: Hoare triple {9764#false} assume true; {9764#false} is VALID [2022-02-20 18:13:17,501 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {9764#false} {9763#true} #362#return; {9764#false} is VALID [2022-02-20 18:13:17,501 INFO L290 TraceCheckUtils]: 80: Hoare triple {9764#false} assume { :end_inline_processEnvironment } true; {9764#false} is VALID [2022-02-20 18:13:17,501 INFO L290 TraceCheckUtils]: 81: Hoare triple {9764#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {9764#false} is VALID [2022-02-20 18:13:17,501 INFO L290 TraceCheckUtils]: 82: Hoare triple {9764#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {9764#false} is VALID [2022-02-20 18:13:17,501 INFO L290 TraceCheckUtils]: 83: Hoare triple {9764#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {9764#false} is VALID [2022-02-20 18:13:17,502 INFO L272 TraceCheckUtils]: 84: Hoare triple {9764#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {9763#true} is VALID [2022-02-20 18:13:17,502 INFO L290 TraceCheckUtils]: 85: Hoare triple {9763#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {9763#true} is VALID [2022-02-20 18:13:17,502 INFO L290 TraceCheckUtils]: 86: Hoare triple {9763#true} assume true; {9763#true} is VALID [2022-02-20 18:13:17,502 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {9763#true} {9764#false} #364#return; {9764#false} is VALID [2022-02-20 18:13:17,502 INFO L290 TraceCheckUtils]: 88: Hoare triple {9764#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {9764#false} is VALID [2022-02-20 18:13:17,502 INFO L290 TraceCheckUtils]: 89: Hoare triple {9764#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {9764#false} is VALID [2022-02-20 18:13:17,502 INFO L290 TraceCheckUtils]: 90: Hoare triple {9764#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {9764#false} is VALID [2022-02-20 18:13:17,503 INFO L290 TraceCheckUtils]: 91: Hoare triple {9764#false} assume !false; {9764#false} is VALID [2022-02-20 18:13:17,503 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:17,503 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:17,503 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121788915] [2022-02-20 18:13:17,503 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121788915] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:17,504 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:17,504 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:13:17,504 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981275115] [2022-02-20 18:13:17,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:17,506 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2022-02-20 18:13:17,506 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:17,506 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:17,559 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:17,560 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:13:17,560 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:17,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:13:17,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:13:17,562 INFO L87 Difference]: Start difference. First operand 690 states and 922 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:18,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:18,405 INFO L93 Difference]: Finished difference Result 1399 states and 1949 transitions. [2022-02-20 18:13:18,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:13:18,406 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2022-02-20 18:13:18,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:18,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:18,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 372 transitions. [2022-02-20 18:13:18,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:18,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 372 transitions. [2022-02-20 18:13:18,416 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 372 transitions. [2022-02-20 18:13:18,733 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 372 edges. 372 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:18,776 INFO L225 Difference]: With dead ends: 1399 [2022-02-20 18:13:18,776 INFO L226 Difference]: Without dead ends: 732 [2022-02-20 18:13:18,779 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:13:18,783 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 97 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 206 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 627 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 206 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:18,785 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [103 Valid, 627 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 206 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:13:18,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 732 states. [2022-02-20 18:13:18,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 732 to 702. [2022-02-20 18:13:18,819 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:18,822 INFO L82 GeneralOperation]: Start isEquivalent. First operand 732 states. Second operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:18,824 INFO L74 IsIncluded]: Start isIncluded. First operand 732 states. Second operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:18,825 INFO L87 Difference]: Start difference. First operand 732 states. Second operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:18,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:18,857 INFO L93 Difference]: Finished difference Result 732 states and 983 transitions. [2022-02-20 18:13:18,857 INFO L276 IsEmpty]: Start isEmpty. Operand 732 states and 983 transitions. [2022-02-20 18:13:18,860 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:18,861 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:18,863 INFO L74 IsIncluded]: Start isIncluded. First operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) Second operand 732 states. [2022-02-20 18:13:18,865 INFO L87 Difference]: Start difference. First operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) Second operand 732 states. [2022-02-20 18:13:18,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:18,898 INFO L93 Difference]: Finished difference Result 732 states and 983 transitions. [2022-02-20 18:13:18,898 INFO L276 IsEmpty]: Start isEmpty. Operand 732 states and 983 transitions. [2022-02-20 18:13:18,901 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:18,901 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:18,901 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:18,901 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:18,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-02-20 18:13:18,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 702 states to 702 states and 934 transitions. [2022-02-20 18:13:18,942 INFO L78 Accepts]: Start accepts. Automaton has 702 states and 934 transitions. Word has length 92 [2022-02-20 18:13:18,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:18,942 INFO L470 AbstractCegarLoop]: Abstraction has 702 states and 934 transitions. [2022-02-20 18:13:18,942 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:18,943 INFO L276 IsEmpty]: Start isEmpty. Operand 702 states and 934 transitions. [2022-02-20 18:13:18,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-02-20 18:13:18,949 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:18,949 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:18,949 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:13:18,949 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:18,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:18,950 INFO L85 PathProgramCache]: Analyzing trace with hash 1534944299, now seen corresponding path program 1 times [2022-02-20 18:13:18,950 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:18,950 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1201401797] [2022-02-20 18:13:18,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:18,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:18,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:19,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,016 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,016 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,016 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #370#return; {14335#true} is VALID [2022-02-20 18:13:19,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:19,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,021 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,021 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,021 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #372#return; {14335#true} is VALID [2022-02-20 18:13:19,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:19,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,027 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,027 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,027 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #374#return; {14335#true} is VALID [2022-02-20 18:13:19,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:19,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,032 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,033 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,033 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #376#return; {14335#true} is VALID [2022-02-20 18:13:19,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:19,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,038 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,038 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,039 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #378#return; {14335#true} is VALID [2022-02-20 18:13:19,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:19,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,049 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,050 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,050 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #380#return; {14335#true} is VALID [2022-02-20 18:13:19,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:13:19,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,054 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {14335#true} is VALID [2022-02-20 18:13:19,054 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,054 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14335#true} #352#return; {14335#true} is VALID [2022-02-20 18:13:19,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:13:19,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:19,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:19,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,100 INFO L290 TraceCheckUtils]: 0: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14335#true} is VALID [2022-02-20 18:13:19,101 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,101 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14336#false} #344#return; {14336#false} is VALID [2022-02-20 18:13:19,101 INFO L290 TraceCheckUtils]: 0: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {14335#true} is VALID [2022-02-20 18:13:19,101 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14335#true} is VALID [2022-02-20 18:13:19,102 INFO L290 TraceCheckUtils]: 2: Hoare triple {14335#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14400#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:13:19,102 INFO L290 TraceCheckUtils]: 3: Hoare triple {14400#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {14401#(= 0 (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1|))} is VALID [2022-02-20 18:13:19,103 INFO L290 TraceCheckUtils]: 4: Hoare triple {14401#(= 0 (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1|))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14336#false} is VALID [2022-02-20 18:13:19,103 INFO L290 TraceCheckUtils]: 5: Hoare triple {14336#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {14336#false} is VALID [2022-02-20 18:13:19,103 INFO L290 TraceCheckUtils]: 6: Hoare triple {14336#false} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {14336#false} is VALID [2022-02-20 18:13:19,103 INFO L290 TraceCheckUtils]: 7: Hoare triple {14336#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {14336#false} is VALID [2022-02-20 18:13:19,104 INFO L290 TraceCheckUtils]: 8: Hoare triple {14336#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {14336#false} is VALID [2022-02-20 18:13:19,104 INFO L272 TraceCheckUtils]: 9: Hoare triple {14336#false} call activatePump__before__methaneQuery(); {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:19,104 INFO L290 TraceCheckUtils]: 10: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14335#true} is VALID [2022-02-20 18:13:19,104 INFO L290 TraceCheckUtils]: 11: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,104 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {14335#true} {14336#false} #344#return; {14336#false} is VALID [2022-02-20 18:13:19,104 INFO L290 TraceCheckUtils]: 13: Hoare triple {14336#false} assume { :end_inline_activatePump } true; {14336#false} is VALID [2022-02-20 18:13:19,104 INFO L290 TraceCheckUtils]: 14: Hoare triple {14336#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14336#false} is VALID [2022-02-20 18:13:19,105 INFO L290 TraceCheckUtils]: 15: Hoare triple {14336#false} assume true; {14336#false} is VALID [2022-02-20 18:13:19,105 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14336#false} {14335#true} #398#return; {14336#false} is VALID [2022-02-20 18:13:19,105 INFO L290 TraceCheckUtils]: 0: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {14335#true} is VALID [2022-02-20 18:13:19,106 INFO L272 TraceCheckUtils]: 1: Hoare triple {14335#true} call processEnvironment__before__lowWaterSensor(); {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:19,106 INFO L290 TraceCheckUtils]: 2: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {14335#true} is VALID [2022-02-20 18:13:19,106 INFO L290 TraceCheckUtils]: 3: Hoare triple {14335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14335#true} is VALID [2022-02-20 18:13:19,107 INFO L290 TraceCheckUtils]: 4: Hoare triple {14335#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14400#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:13:19,107 INFO L290 TraceCheckUtils]: 5: Hoare triple {14400#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {14401#(= 0 (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1|))} is VALID [2022-02-20 18:13:19,108 INFO L290 TraceCheckUtils]: 6: Hoare triple {14401#(= 0 (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1|))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14336#false} is VALID [2022-02-20 18:13:19,108 INFO L290 TraceCheckUtils]: 7: Hoare triple {14336#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {14336#false} is VALID [2022-02-20 18:13:19,121 INFO L290 TraceCheckUtils]: 8: Hoare triple {14336#false} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {14336#false} is VALID [2022-02-20 18:13:19,121 INFO L290 TraceCheckUtils]: 9: Hoare triple {14336#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {14336#false} is VALID [2022-02-20 18:13:19,121 INFO L290 TraceCheckUtils]: 10: Hoare triple {14336#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {14336#false} is VALID [2022-02-20 18:13:19,122 INFO L272 TraceCheckUtils]: 11: Hoare triple {14336#false} call activatePump__before__methaneQuery(); {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:19,127 INFO L290 TraceCheckUtils]: 12: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14335#true} is VALID [2022-02-20 18:13:19,127 INFO L290 TraceCheckUtils]: 13: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,127 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {14335#true} {14336#false} #344#return; {14336#false} is VALID [2022-02-20 18:13:19,127 INFO L290 TraceCheckUtils]: 15: Hoare triple {14336#false} assume { :end_inline_activatePump } true; {14336#false} is VALID [2022-02-20 18:13:19,128 INFO L290 TraceCheckUtils]: 16: Hoare triple {14336#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14336#false} is VALID [2022-02-20 18:13:19,128 INFO L290 TraceCheckUtils]: 17: Hoare triple {14336#false} assume true; {14336#false} is VALID [2022-02-20 18:13:19,128 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {14336#false} {14335#true} #398#return; {14336#false} is VALID [2022-02-20 18:13:19,128 INFO L290 TraceCheckUtils]: 19: Hoare triple {14336#false} assume true; {14336#false} is VALID [2022-02-20 18:13:19,128 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {14336#false} {14335#true} #362#return; {14336#false} is VALID [2022-02-20 18:13:19,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-02-20 18:13:19,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:19,133 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {14335#true} is VALID [2022-02-20 18:13:19,133 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,133 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14335#true} {14336#false} #364#return; {14336#false} is VALID [2022-02-20 18:13:19,133 INFO L290 TraceCheckUtils]: 0: Hoare triple {14335#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {14335#true} is VALID [2022-02-20 18:13:19,133 INFO L290 TraceCheckUtils]: 1: Hoare triple {14335#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {14335#true} is VALID [2022-02-20 18:13:19,133 INFO L290 TraceCheckUtils]: 2: Hoare triple {14335#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L272 TraceCheckUtils]: 3: Hoare triple {14335#true} call select_features_#t~ret11#1 := select_one(); {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L290 TraceCheckUtils]: 4: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L290 TraceCheckUtils]: 5: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {14335#true} {14335#true} #370#return; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L290 TraceCheckUtils]: 7: Hoare triple {14335#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L272 TraceCheckUtils]: 8: Hoare triple {14335#true} call select_features_#t~ret12#1 := select_one(); {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L290 TraceCheckUtils]: 9: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L290 TraceCheckUtils]: 10: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,134 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14335#true} {14335#true} #372#return; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L290 TraceCheckUtils]: 12: Hoare triple {14335#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L272 TraceCheckUtils]: 13: Hoare triple {14335#true} call select_features_#t~ret13#1 := select_one(); {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L290 TraceCheckUtils]: 14: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L290 TraceCheckUtils]: 15: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14335#true} {14335#true} #374#return; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L290 TraceCheckUtils]: 17: Hoare triple {14335#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L272 TraceCheckUtils]: 18: Hoare triple {14335#true} call select_features_#t~ret14#1 := select_one(); {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L290 TraceCheckUtils]: 19: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,135 INFO L290 TraceCheckUtils]: 20: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {14335#true} {14335#true} #376#return; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L290 TraceCheckUtils]: 22: Hoare triple {14335#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L272 TraceCheckUtils]: 23: Hoare triple {14335#true} call select_features_#t~ret15#1 := select_one(); {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L290 TraceCheckUtils]: 24: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L290 TraceCheckUtils]: 25: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {14335#true} {14335#true} #378#return; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L290 TraceCheckUtils]: 27: Hoare triple {14335#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L272 TraceCheckUtils]: 28: Hoare triple {14335#true} call select_features_#t~ret16#1 := select_one(); {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L290 TraceCheckUtils]: 29: Hoare triple {14335#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {14335#true} is VALID [2022-02-20 18:13:19,136 INFO L290 TraceCheckUtils]: 30: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14335#true} {14335#true} #380#return; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 32: Hoare triple {14335#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 33: Hoare triple {14335#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 34: Hoare triple {14335#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 35: Hoare triple {14335#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 36: Hoare triple {14335#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 37: Hoare triple {14335#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14335#true} is VALID [2022-02-20 18:13:19,137 INFO L290 TraceCheckUtils]: 38: Hoare triple {14335#true} assume !false; {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 39: Hoare triple {14335#true} assume test_~splverifierCounter~0#1 < 4; {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 40: Hoare triple {14335#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 41: Hoare triple {14335#true} assume !(0 != test_~tmp~4#1); {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 42: Hoare triple {14335#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 43: Hoare triple {14335#true} assume !(0 != test_~tmp___0~0#1); {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 44: Hoare triple {14335#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 45: Hoare triple {14335#true} assume 0 != test_~tmp___2~0#1; {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L290 TraceCheckUtils]: 46: Hoare triple {14335#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {14335#true} is VALID [2022-02-20 18:13:19,138 INFO L272 TraceCheckUtils]: 47: Hoare triple {14335#true} call timeShift(); {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 48: Hoare triple {14335#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L272 TraceCheckUtils]: 49: Hoare triple {14335#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 50: Hoare triple {14335#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 51: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {14335#true} {14335#true} #352#return; {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 53: Hoare triple {14335#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 54: Hoare triple {14335#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 55: Hoare triple {14335#true} assume !(0 != ~pumpRunning~0); {14335#true} is VALID [2022-02-20 18:13:19,139 INFO L290 TraceCheckUtils]: 56: Hoare triple {14335#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {14335#true} is VALID [2022-02-20 18:13:19,140 INFO L290 TraceCheckUtils]: 57: Hoare triple {14335#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {14335#true} is VALID [2022-02-20 18:13:19,143 INFO L272 TraceCheckUtils]: 58: Hoare triple {14335#true} call processEnvironment__before__methaneAlarm(); {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:19,144 INFO L290 TraceCheckUtils]: 59: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {14335#true} is VALID [2022-02-20 18:13:19,144 INFO L272 TraceCheckUtils]: 60: Hoare triple {14335#true} call processEnvironment__before__lowWaterSensor(); {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:19,144 INFO L290 TraceCheckUtils]: 61: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {14335#true} is VALID [2022-02-20 18:13:19,148 INFO L290 TraceCheckUtils]: 62: Hoare triple {14335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14335#true} is VALID [2022-02-20 18:13:19,149 INFO L290 TraceCheckUtils]: 63: Hoare triple {14335#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14400#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:13:19,149 INFO L290 TraceCheckUtils]: 64: Hoare triple {14400#(= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {14401#(= 0 (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1|))} is VALID [2022-02-20 18:13:19,150 INFO L290 TraceCheckUtils]: 65: Hoare triple {14401#(= 0 (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1|))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14336#false} is VALID [2022-02-20 18:13:19,150 INFO L290 TraceCheckUtils]: 66: Hoare triple {14336#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {14336#false} is VALID [2022-02-20 18:13:19,150 INFO L290 TraceCheckUtils]: 67: Hoare triple {14336#false} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {14336#false} is VALID [2022-02-20 18:13:19,150 INFO L290 TraceCheckUtils]: 68: Hoare triple {14336#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {14336#false} is VALID [2022-02-20 18:13:19,150 INFO L290 TraceCheckUtils]: 69: Hoare triple {14336#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {14336#false} is VALID [2022-02-20 18:13:19,151 INFO L272 TraceCheckUtils]: 70: Hoare triple {14336#false} call activatePump__before__methaneQuery(); {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:19,151 INFO L290 TraceCheckUtils]: 71: Hoare triple {14382#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14335#true} is VALID [2022-02-20 18:13:19,151 INFO L290 TraceCheckUtils]: 72: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,151 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {14335#true} {14336#false} #344#return; {14336#false} is VALID [2022-02-20 18:13:19,151 INFO L290 TraceCheckUtils]: 74: Hoare triple {14336#false} assume { :end_inline_activatePump } true; {14336#false} is VALID [2022-02-20 18:13:19,152 INFO L290 TraceCheckUtils]: 75: Hoare triple {14336#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14336#false} is VALID [2022-02-20 18:13:19,152 INFO L290 TraceCheckUtils]: 76: Hoare triple {14336#false} assume true; {14336#false} is VALID [2022-02-20 18:13:19,152 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {14336#false} {14335#true} #398#return; {14336#false} is VALID [2022-02-20 18:13:19,152 INFO L290 TraceCheckUtils]: 78: Hoare triple {14336#false} assume true; {14336#false} is VALID [2022-02-20 18:13:19,152 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {14336#false} {14335#true} #362#return; {14336#false} is VALID [2022-02-20 18:13:19,152 INFO L290 TraceCheckUtils]: 80: Hoare triple {14336#false} assume { :end_inline_processEnvironment } true; {14336#false} is VALID [2022-02-20 18:13:19,153 INFO L290 TraceCheckUtils]: 81: Hoare triple {14336#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {14336#false} is VALID [2022-02-20 18:13:19,153 INFO L290 TraceCheckUtils]: 82: Hoare triple {14336#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {14336#false} is VALID [2022-02-20 18:13:19,153 INFO L290 TraceCheckUtils]: 83: Hoare triple {14336#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {14336#false} is VALID [2022-02-20 18:13:19,153 INFO L272 TraceCheckUtils]: 84: Hoare triple {14336#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {14335#true} is VALID [2022-02-20 18:13:19,153 INFO L290 TraceCheckUtils]: 85: Hoare triple {14335#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {14335#true} is VALID [2022-02-20 18:13:19,153 INFO L290 TraceCheckUtils]: 86: Hoare triple {14335#true} assume true; {14335#true} is VALID [2022-02-20 18:13:19,153 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {14335#true} {14336#false} #364#return; {14336#false} is VALID [2022-02-20 18:13:19,154 INFO L290 TraceCheckUtils]: 88: Hoare triple {14336#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {14336#false} is VALID [2022-02-20 18:13:19,154 INFO L290 TraceCheckUtils]: 89: Hoare triple {14336#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {14336#false} is VALID [2022-02-20 18:13:19,154 INFO L290 TraceCheckUtils]: 90: Hoare triple {14336#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {14336#false} is VALID [2022-02-20 18:13:19,154 INFO L290 TraceCheckUtils]: 91: Hoare triple {14336#false} assume !false; {14336#false} is VALID [2022-02-20 18:13:19,154 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:19,155 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:19,155 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1201401797] [2022-02-20 18:13:19,155 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1201401797] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:19,155 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:19,155 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:13:19,155 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014618023] [2022-02-20 18:13:19,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:19,156 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2022-02-20 18:13:19,156 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:19,157 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:19,209 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:19,209 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:13:19,209 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:19,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:13:19,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:13:19,210 INFO L87 Difference]: Start difference. First operand 702 states and 934 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:19,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:19,804 INFO L93 Difference]: Finished difference Result 1259 states and 1736 transitions. [2022-02-20 18:13:19,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:13:19,804 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2022-02-20 18:13:19,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:19,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:19,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 368 transitions. [2022-02-20 18:13:19,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:19,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 368 transitions. [2022-02-20 18:13:19,813 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 368 transitions. [2022-02-20 18:13:20,056 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 368 edges. 368 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:20,081 INFO L225 Difference]: With dead ends: 1259 [2022-02-20 18:13:20,081 INFO L226 Difference]: Without dead ends: 580 [2022-02-20 18:13:20,083 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:13:20,086 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 97 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:20,087 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 488 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:13:20,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2022-02-20 18:13:20,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 566. [2022-02-20 18:13:20,108 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:20,111 INFO L82 GeneralOperation]: Start isEquivalent. First operand 580 states. Second operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2022-02-20 18:13:20,112 INFO L74 IsIncluded]: Start isIncluded. First operand 580 states. Second operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2022-02-20 18:13:20,114 INFO L87 Difference]: Start difference. First operand 580 states. Second operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2022-02-20 18:13:20,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:20,135 INFO L93 Difference]: Finished difference Result 580 states and 766 transitions. [2022-02-20 18:13:20,135 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 766 transitions. [2022-02-20 18:13:20,137 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:20,137 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:20,139 INFO L74 IsIncluded]: Start isIncluded. First operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) Second operand 580 states. [2022-02-20 18:13:20,140 INFO L87 Difference]: Start difference. First operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) Second operand 580 states. [2022-02-20 18:13:20,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:20,165 INFO L93 Difference]: Finished difference Result 580 states and 766 transitions. [2022-02-20 18:13:20,165 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 766 transitions. [2022-02-20 18:13:20,167 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:20,167 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:20,167 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:20,168 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:20,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2022-02-20 18:13:20,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 566 states to 566 states and 743 transitions. [2022-02-20 18:13:20,196 INFO L78 Accepts]: Start accepts. Automaton has 566 states and 743 transitions. Word has length 92 [2022-02-20 18:13:20,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:20,197 INFO L470 AbstractCegarLoop]: Abstraction has 566 states and 743 transitions. [2022-02-20 18:13:20,197 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:13:20,197 INFO L276 IsEmpty]: Start isEmpty. Operand 566 states and 743 transitions. [2022-02-20 18:13:20,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-02-20 18:13:20,199 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:20,199 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:20,199 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:13:20,200 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:20,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:20,200 INFO L85 PathProgramCache]: Analyzing trace with hash 1664630151, now seen corresponding path program 1 times [2022-02-20 18:13:20,201 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:20,201 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [738448525] [2022-02-20 18:13:20,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:20,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:20,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:20,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,333 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,334 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,334 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #370#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:20,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,342 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,342 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,342 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #372#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:20,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,350 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,350 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,351 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #374#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:20,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,356 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,356 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,356 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #376#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:20,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,361 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,361 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,362 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #378#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:20,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,376 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,376 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,377 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #380#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:13:20,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,389 INFO L290 TraceCheckUtils]: 0: Hoare triple {18255#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,389 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#(<= ~waterLevel~0 2)} assume true; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,389 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18224#(<= ~waterLevel~0 2)} {18202#(= ~waterLevel~0 1)} #382#return; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-02-20 18:13:20,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,393 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {18200#true} is VALID [2022-02-20 18:13:20,394 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,394 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18224#(<= ~waterLevel~0 2)} #352#return; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-02-20 18:13:20,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:20,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:20,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,426 INFO L290 TraceCheckUtils]: 0: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18200#true} is VALID [2022-02-20 18:13:20,426 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,426 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18274#(not (<= ~waterLevel~0 1))} #344#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,427 INFO L290 TraceCheckUtils]: 0: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {18200#true} is VALID [2022-02-20 18:13:20,427 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {18200#true} is VALID [2022-02-20 18:13:20,427 INFO L290 TraceCheckUtils]: 2: Hoare triple {18200#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,428 INFO L290 TraceCheckUtils]: 3: Hoare triple {18274#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,428 INFO L290 TraceCheckUtils]: 4: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,428 INFO L290 TraceCheckUtils]: 5: Hoare triple {18274#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,429 INFO L290 TraceCheckUtils]: 6: Hoare triple {18274#(not (<= ~waterLevel~0 1))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,429 INFO L290 TraceCheckUtils]: 7: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,429 INFO L290 TraceCheckUtils]: 8: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,430 INFO L272 TraceCheckUtils]: 9: Hoare triple {18274#(not (<= ~waterLevel~0 1))} call activatePump__before__methaneQuery(); {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:20,430 INFO L290 TraceCheckUtils]: 10: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18200#true} is VALID [2022-02-20 18:13:20,430 INFO L290 TraceCheckUtils]: 11: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,431 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {18200#true} {18274#(not (<= ~waterLevel~0 1))} #344#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,431 INFO L290 TraceCheckUtils]: 13: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,432 INFO L290 TraceCheckUtils]: 14: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,432 INFO L290 TraceCheckUtils]: 15: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,433 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18274#(not (<= ~waterLevel~0 1))} {18200#true} #398#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,433 INFO L290 TraceCheckUtils]: 0: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {18200#true} is VALID [2022-02-20 18:13:20,433 INFO L272 TraceCheckUtils]: 1: Hoare triple {18200#true} call processEnvironment__before__lowWaterSensor(); {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:20,434 INFO L290 TraceCheckUtils]: 2: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {18200#true} is VALID [2022-02-20 18:13:20,434 INFO L290 TraceCheckUtils]: 3: Hoare triple {18200#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {18200#true} is VALID [2022-02-20 18:13:20,434 INFO L290 TraceCheckUtils]: 4: Hoare triple {18200#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,435 INFO L290 TraceCheckUtils]: 5: Hoare triple {18274#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,435 INFO L290 TraceCheckUtils]: 6: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,435 INFO L290 TraceCheckUtils]: 7: Hoare triple {18274#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,435 INFO L290 TraceCheckUtils]: 8: Hoare triple {18274#(not (<= ~waterLevel~0 1))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,436 INFO L290 TraceCheckUtils]: 9: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,436 INFO L290 TraceCheckUtils]: 10: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,437 INFO L272 TraceCheckUtils]: 11: Hoare triple {18274#(not (<= ~waterLevel~0 1))} call activatePump__before__methaneQuery(); {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:20,437 INFO L290 TraceCheckUtils]: 12: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18200#true} is VALID [2022-02-20 18:13:20,437 INFO L290 TraceCheckUtils]: 13: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,437 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18200#true} {18274#(not (<= ~waterLevel~0 1))} #344#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,437 INFO L290 TraceCheckUtils]: 15: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,438 INFO L290 TraceCheckUtils]: 16: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,438 INFO L290 TraceCheckUtils]: 17: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,438 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {18274#(not (<= ~waterLevel~0 1))} {18200#true} #398#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,439 INFO L290 TraceCheckUtils]: 19: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,439 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {18274#(not (<= ~waterLevel~0 1))} {18224#(<= ~waterLevel~0 2)} #362#return; {18249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:13:20,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-02-20 18:13:20,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:20,442 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {18200#true} is VALID [2022-02-20 18:13:20,442 INFO L290 TraceCheckUtils]: 1: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,443 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18200#true} {18201#false} #364#return; {18201#false} is VALID [2022-02-20 18:13:20,443 INFO L290 TraceCheckUtils]: 0: Hoare triple {18200#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,443 INFO L290 TraceCheckUtils]: 1: Hoare triple {18202#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,444 INFO L290 TraceCheckUtils]: 2: Hoare triple {18202#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,444 INFO L272 TraceCheckUtils]: 3: Hoare triple {18202#(= ~waterLevel~0 1)} call select_features_#t~ret11#1 := select_one(); {18200#true} is VALID [2022-02-20 18:13:20,444 INFO L290 TraceCheckUtils]: 4: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,444 INFO L290 TraceCheckUtils]: 5: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,444 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #370#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,445 INFO L290 TraceCheckUtils]: 7: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,445 INFO L272 TraceCheckUtils]: 8: Hoare triple {18202#(= ~waterLevel~0 1)} call select_features_#t~ret12#1 := select_one(); {18200#true} is VALID [2022-02-20 18:13:20,445 INFO L290 TraceCheckUtils]: 9: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,445 INFO L290 TraceCheckUtils]: 10: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,446 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #372#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,446 INFO L290 TraceCheckUtils]: 12: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,446 INFO L272 TraceCheckUtils]: 13: Hoare triple {18202#(= ~waterLevel~0 1)} call select_features_#t~ret13#1 := select_one(); {18200#true} is VALID [2022-02-20 18:13:20,446 INFO L290 TraceCheckUtils]: 14: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,446 INFO L290 TraceCheckUtils]: 15: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,447 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #374#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,447 INFO L290 TraceCheckUtils]: 17: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,447 INFO L272 TraceCheckUtils]: 18: Hoare triple {18202#(= ~waterLevel~0 1)} call select_features_#t~ret14#1 := select_one(); {18200#true} is VALID [2022-02-20 18:13:20,447 INFO L290 TraceCheckUtils]: 19: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,447 INFO L290 TraceCheckUtils]: 20: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,448 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #376#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,448 INFO L290 TraceCheckUtils]: 22: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,448 INFO L272 TraceCheckUtils]: 23: Hoare triple {18202#(= ~waterLevel~0 1)} call select_features_#t~ret15#1 := select_one(); {18200#true} is VALID [2022-02-20 18:13:20,448 INFO L290 TraceCheckUtils]: 24: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,448 INFO L290 TraceCheckUtils]: 25: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,449 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #378#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,449 INFO L290 TraceCheckUtils]: 27: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,449 INFO L272 TraceCheckUtils]: 28: Hoare triple {18202#(= ~waterLevel~0 1)} call select_features_#t~ret16#1 := select_one(); {18200#true} is VALID [2022-02-20 18:13:20,449 INFO L290 TraceCheckUtils]: 29: Hoare triple {18200#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {18200#true} is VALID [2022-02-20 18:13:20,449 INFO L290 TraceCheckUtils]: 30: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,450 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {18200#true} {18202#(= ~waterLevel~0 1)} #380#return; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,450 INFO L290 TraceCheckUtils]: 32: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,450 INFO L290 TraceCheckUtils]: 33: Hoare triple {18202#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,451 INFO L290 TraceCheckUtils]: 34: Hoare triple {18202#(= ~waterLevel~0 1)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,451 INFO L290 TraceCheckUtils]: 35: Hoare triple {18202#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,451 INFO L290 TraceCheckUtils]: 36: Hoare triple {18202#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,452 INFO L290 TraceCheckUtils]: 37: Hoare triple {18202#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,452 INFO L290 TraceCheckUtils]: 38: Hoare triple {18202#(= ~waterLevel~0 1)} assume !false; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,452 INFO L290 TraceCheckUtils]: 39: Hoare triple {18202#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,453 INFO L290 TraceCheckUtils]: 40: Hoare triple {18202#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,453 INFO L290 TraceCheckUtils]: 41: Hoare triple {18202#(= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {18202#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:13:20,453 INFO L272 TraceCheckUtils]: 42: Hoare triple {18202#(= ~waterLevel~0 1)} call waterRise(); {18255#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:13:20,454 INFO L290 TraceCheckUtils]: 43: Hoare triple {18255#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,454 INFO L290 TraceCheckUtils]: 44: Hoare triple {18224#(<= ~waterLevel~0 2)} assume true; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,455 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {18224#(<= ~waterLevel~0 2)} {18202#(= ~waterLevel~0 1)} #382#return; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,455 INFO L290 TraceCheckUtils]: 46: Hoare triple {18224#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,455 INFO L290 TraceCheckUtils]: 47: Hoare triple {18224#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0#1); {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,455 INFO L290 TraceCheckUtils]: 48: Hoare triple {18224#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,456 INFO L290 TraceCheckUtils]: 49: Hoare triple {18224#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,456 INFO L290 TraceCheckUtils]: 50: Hoare triple {18224#(<= ~waterLevel~0 2)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,456 INFO L272 TraceCheckUtils]: 51: Hoare triple {18224#(<= ~waterLevel~0 2)} call timeShift(); {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,457 INFO L290 TraceCheckUtils]: 52: Hoare triple {18224#(<= ~waterLevel~0 2)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,457 INFO L272 TraceCheckUtils]: 53: Hoare triple {18224#(<= ~waterLevel~0 2)} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {18200#true} is VALID [2022-02-20 18:13:20,457 INFO L290 TraceCheckUtils]: 54: Hoare triple {18200#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {18200#true} is VALID [2022-02-20 18:13:20,457 INFO L290 TraceCheckUtils]: 55: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,457 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {18200#true} {18224#(<= ~waterLevel~0 2)} #352#return; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,458 INFO L290 TraceCheckUtils]: 57: Hoare triple {18224#(<= ~waterLevel~0 2)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,458 INFO L290 TraceCheckUtils]: 58: Hoare triple {18224#(<= ~waterLevel~0 2)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,458 INFO L290 TraceCheckUtils]: 59: Hoare triple {18224#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,459 INFO L290 TraceCheckUtils]: 60: Hoare triple {18224#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,459 INFO L290 TraceCheckUtils]: 61: Hoare triple {18224#(<= ~waterLevel~0 2)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {18224#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:13:20,459 INFO L272 TraceCheckUtils]: 62: Hoare triple {18224#(<= ~waterLevel~0 2)} call processEnvironment__before__methaneAlarm(); {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:20,459 INFO L290 TraceCheckUtils]: 63: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {18200#true} is VALID [2022-02-20 18:13:20,460 INFO L272 TraceCheckUtils]: 64: Hoare triple {18200#true} call processEnvironment__before__lowWaterSensor(); {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:20,460 INFO L290 TraceCheckUtils]: 65: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {18200#true} is VALID [2022-02-20 18:13:20,460 INFO L290 TraceCheckUtils]: 66: Hoare triple {18200#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {18200#true} is VALID [2022-02-20 18:13:20,460 INFO L290 TraceCheckUtils]: 67: Hoare triple {18200#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,461 INFO L290 TraceCheckUtils]: 68: Hoare triple {18274#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,461 INFO L290 TraceCheckUtils]: 69: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,461 INFO L290 TraceCheckUtils]: 70: Hoare triple {18274#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,462 INFO L290 TraceCheckUtils]: 71: Hoare triple {18274#(not (<= ~waterLevel~0 1))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,462 INFO L290 TraceCheckUtils]: 72: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,462 INFO L290 TraceCheckUtils]: 73: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,463 INFO L272 TraceCheckUtils]: 74: Hoare triple {18274#(not (<= ~waterLevel~0 1))} call activatePump__before__methaneQuery(); {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:20,463 INFO L290 TraceCheckUtils]: 75: Hoare triple {18256#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18200#true} is VALID [2022-02-20 18:13:20,463 INFO L290 TraceCheckUtils]: 76: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,463 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {18200#true} {18274#(not (<= ~waterLevel~0 1))} #344#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,464 INFO L290 TraceCheckUtils]: 78: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,464 INFO L290 TraceCheckUtils]: 79: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,464 INFO L290 TraceCheckUtils]: 80: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,465 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {18274#(not (<= ~waterLevel~0 1))} {18200#true} #398#return; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,465 INFO L290 TraceCheckUtils]: 82: Hoare triple {18274#(not (<= ~waterLevel~0 1))} assume true; {18274#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:13:20,465 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {18274#(not (<= ~waterLevel~0 1))} {18224#(<= ~waterLevel~0 2)} #362#return; {18249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:13:20,466 INFO L290 TraceCheckUtils]: 84: Hoare triple {18249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {18249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:13:20,466 INFO L290 TraceCheckUtils]: 85: Hoare triple {18249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {18250#(and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))} is VALID [2022-02-20 18:13:20,467 INFO L290 TraceCheckUtils]: 86: Hoare triple {18250#(and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {18251#(and (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2))} is VALID [2022-02-20 18:13:20,467 INFO L290 TraceCheckUtils]: 87: Hoare triple {18251#(and (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {18201#false} is VALID [2022-02-20 18:13:20,467 INFO L272 TraceCheckUtils]: 88: Hoare triple {18201#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {18200#true} is VALID [2022-02-20 18:13:20,467 INFO L290 TraceCheckUtils]: 89: Hoare triple {18200#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {18200#true} is VALID [2022-02-20 18:13:20,468 INFO L290 TraceCheckUtils]: 90: Hoare triple {18200#true} assume true; {18200#true} is VALID [2022-02-20 18:13:20,468 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {18200#true} {18201#false} #364#return; {18201#false} is VALID [2022-02-20 18:13:20,468 INFO L290 TraceCheckUtils]: 92: Hoare triple {18201#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {18201#false} is VALID [2022-02-20 18:13:20,468 INFO L290 TraceCheckUtils]: 93: Hoare triple {18201#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {18201#false} is VALID [2022-02-20 18:13:20,468 INFO L290 TraceCheckUtils]: 94: Hoare triple {18201#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {18201#false} is VALID [2022-02-20 18:13:20,468 INFO L290 TraceCheckUtils]: 95: Hoare triple {18201#false} assume !false; {18201#false} is VALID [2022-02-20 18:13:20,469 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:13:20,469 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:20,469 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [738448525] [2022-02-20 18:13:20,469 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [738448525] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:20,469 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:20,469 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:13:20,469 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [815547824] [2022-02-20 18:13:20,470 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:20,470 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) Word has length 96 [2022-02-20 18:13:20,470 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:20,471 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-02-20 18:13:20,528 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:20,528 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:13:20,528 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:20,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:13:20,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:13:20,529 INFO L87 Difference]: Start difference. First operand 566 states and 743 transitions. Second operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-02-20 18:13:24,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:24,397 INFO L93 Difference]: Finished difference Result 1703 states and 2381 transitions. [2022-02-20 18:13:24,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-02-20 18:13:24,398 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) Word has length 96 [2022-02-20 18:13:24,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:24,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-02-20 18:13:24,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 753 transitions. [2022-02-20 18:13:24,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-02-20 18:13:24,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 753 transitions. [2022-02-20 18:13:24,418 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 29 states and 753 transitions. [2022-02-20 18:13:25,019 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 753 edges. 753 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:25,111 INFO L225 Difference]: With dead ends: 1703 [2022-02-20 18:13:25,111 INFO L226 Difference]: Without dead ends: 1292 [2022-02-20 18:13:25,114 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2022-02-20 18:13:25,115 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 888 mSDsluCounter, 607 mSDsCounter, 0 mSdLazyCounter, 1013 mSolverCounterSat, 424 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 896 SdHoareTripleChecker+Valid, 825 SdHoareTripleChecker+Invalid, 1437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 424 IncrementalHoareTripleChecker+Valid, 1013 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:25,115 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [896 Valid, 825 Invalid, 1437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [424 Valid, 1013 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-02-20 18:13:25,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1292 states. [2022-02-20 18:13:25,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1292 to 1169. [2022-02-20 18:13:25,418 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:25,422 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1292 states. Second operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2022-02-20 18:13:25,425 INFO L74 IsIncluded]: Start isIncluded. First operand 1292 states. Second operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2022-02-20 18:13:25,427 INFO L87 Difference]: Start difference. First operand 1292 states. Second operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2022-02-20 18:13:25,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:25,506 INFO L93 Difference]: Finished difference Result 1292 states and 1723 transitions. [2022-02-20 18:13:25,506 INFO L276 IsEmpty]: Start isEmpty. Operand 1292 states and 1723 transitions. [2022-02-20 18:13:25,511 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:25,511 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:25,515 INFO L74 IsIncluded]: Start isIncluded. First operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) Second operand 1292 states. [2022-02-20 18:13:25,518 INFO L87 Difference]: Start difference. First operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) Second operand 1292 states. [2022-02-20 18:13:25,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:25,599 INFO L93 Difference]: Finished difference Result 1292 states and 1723 transitions. [2022-02-20 18:13:25,599 INFO L276 IsEmpty]: Start isEmpty. Operand 1292 states and 1723 transitions. [2022-02-20 18:13:25,603 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:25,604 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:25,604 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:25,604 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:25,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2022-02-20 18:13:25,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1169 states to 1169 states and 1579 transitions. [2022-02-20 18:13:25,700 INFO L78 Accepts]: Start accepts. Automaton has 1169 states and 1579 transitions. Word has length 96 [2022-02-20 18:13:25,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:25,700 INFO L470 AbstractCegarLoop]: Abstraction has 1169 states and 1579 transitions. [2022-02-20 18:13:25,701 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-02-20 18:13:25,701 INFO L276 IsEmpty]: Start isEmpty. Operand 1169 states and 1579 transitions. [2022-02-20 18:13:25,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-02-20 18:13:25,704 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:25,704 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:25,704 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:13:25,705 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:25,705 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:25,705 INFO L85 PathProgramCache]: Analyzing trace with hash -387681602, now seen corresponding path program 1 times [2022-02-20 18:13:25,705 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:25,705 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [570594309] [2022-02-20 18:13:25,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:25,706 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:25,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:25,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,765 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,765 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,765 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #370#return; {25043#true} is VALID [2022-02-20 18:13:25,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:25,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,769 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,769 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,769 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #372#return; {25043#true} is VALID [2022-02-20 18:13:25,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:25,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,774 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,775 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,775 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #374#return; {25043#true} is VALID [2022-02-20 18:13:25,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:25,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,779 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,780 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #376#return; {25043#true} is VALID [2022-02-20 18:13:25,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:25,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,786 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,787 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,787 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #378#return; {25043#true} is VALID [2022-02-20 18:13:25,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:25,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,800 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,800 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,800 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #380#return; {25043#true} is VALID [2022-02-20 18:13:25,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:13:25,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,806 INFO L290 TraceCheckUtils]: 0: Hoare triple {25112#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25043#true} is VALID [2022-02-20 18:13:25,806 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,806 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #382#return; {25043#true} is VALID [2022-02-20 18:13:25,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:13:25,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:25,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,830 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,830 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,830 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #352#return; {25043#true} is VALID [2022-02-20 18:13:25,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:13:25,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:25,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:25,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,849 INFO L290 TraceCheckUtils]: 0: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,849 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,849 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25043#true} #344#return; {25043#true} is VALID [2022-02-20 18:13:25,849 INFO L290 TraceCheckUtils]: 0: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {25043#true} is VALID [2022-02-20 18:13:25,849 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,849 INFO L290 TraceCheckUtils]: 2: Hoare triple {25043#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,850 INFO L290 TraceCheckUtils]: 3: Hoare triple {25043#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {25043#true} is VALID [2022-02-20 18:13:25,850 INFO L290 TraceCheckUtils]: 4: Hoare triple {25043#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {25043#true} is VALID [2022-02-20 18:13:25,850 INFO L290 TraceCheckUtils]: 5: Hoare triple {25043#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {25043#true} is VALID [2022-02-20 18:13:25,850 INFO L290 TraceCheckUtils]: 6: Hoare triple {25043#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {25043#true} is VALID [2022-02-20 18:13:25,850 INFO L290 TraceCheckUtils]: 7: Hoare triple {25043#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,850 INFO L290 TraceCheckUtils]: 8: Hoare triple {25043#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L272 TraceCheckUtils]: 9: Hoare triple {25043#true} call activatePump__before__methaneQuery(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,851 INFO L290 TraceCheckUtils]: 10: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L290 TraceCheckUtils]: 11: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {25043#true} {25043#true} #344#return; {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L290 TraceCheckUtils]: 13: Hoare triple {25043#true} assume { :end_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L290 TraceCheckUtils]: 14: Hoare triple {25043#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L290 TraceCheckUtils]: 15: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,851 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {25043#true} {25043#true} #398#return; {25043#true} is VALID [2022-02-20 18:13:25,852 INFO L290 TraceCheckUtils]: 0: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {25043#true} is VALID [2022-02-20 18:13:25,852 INFO L272 TraceCheckUtils]: 1: Hoare triple {25043#true} call processEnvironment__before__lowWaterSensor(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,852 INFO L290 TraceCheckUtils]: 2: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {25043#true} is VALID [2022-02-20 18:13:25,852 INFO L290 TraceCheckUtils]: 3: Hoare triple {25043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,852 INFO L290 TraceCheckUtils]: 4: Hoare triple {25043#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,852 INFO L290 TraceCheckUtils]: 5: Hoare triple {25043#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {25043#true} is VALID [2022-02-20 18:13:25,853 INFO L290 TraceCheckUtils]: 6: Hoare triple {25043#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {25043#true} is VALID [2022-02-20 18:13:25,853 INFO L290 TraceCheckUtils]: 7: Hoare triple {25043#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {25043#true} is VALID [2022-02-20 18:13:25,853 INFO L290 TraceCheckUtils]: 8: Hoare triple {25043#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {25043#true} is VALID [2022-02-20 18:13:25,853 INFO L290 TraceCheckUtils]: 9: Hoare triple {25043#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,853 INFO L290 TraceCheckUtils]: 10: Hoare triple {25043#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {25043#true} is VALID [2022-02-20 18:13:25,853 INFO L272 TraceCheckUtils]: 11: Hoare triple {25043#true} call activatePump__before__methaneQuery(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,853 INFO L290 TraceCheckUtils]: 12: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L290 TraceCheckUtils]: 13: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {25043#true} {25043#true} #344#return; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L290 TraceCheckUtils]: 15: Hoare triple {25043#true} assume { :end_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L290 TraceCheckUtils]: 16: Hoare triple {25043#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L290 TraceCheckUtils]: 17: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {25043#true} {25043#true} #398#return; {25043#true} is VALID [2022-02-20 18:13:25,854 INFO L290 TraceCheckUtils]: 19: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {25043#true} {25117#(not (= 0 ~systemActive~0))} #362#return; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,855 INFO L290 TraceCheckUtils]: 0: Hoare triple {25113#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L272 TraceCheckUtils]: 1: Hoare triple {25043#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L290 TraceCheckUtils]: 2: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L290 TraceCheckUtils]: 3: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25043#true} {25043#true} #352#return; {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L290 TraceCheckUtils]: 5: Hoare triple {25043#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {25043#true} is VALID [2022-02-20 18:13:25,855 INFO L290 TraceCheckUtils]: 6: Hoare triple {25043#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25043#true} is VALID [2022-02-20 18:13:25,856 INFO L290 TraceCheckUtils]: 7: Hoare triple {25043#true} assume !(0 != ~pumpRunning~0); {25043#true} is VALID [2022-02-20 18:13:25,856 INFO L290 TraceCheckUtils]: 8: Hoare triple {25043#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,856 INFO L290 TraceCheckUtils]: 9: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,857 INFO L272 TraceCheckUtils]: 10: Hoare triple {25117#(not (= 0 ~systemActive~0))} call processEnvironment__before__methaneAlarm(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,857 INFO L290 TraceCheckUtils]: 11: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {25043#true} is VALID [2022-02-20 18:13:25,857 INFO L272 TraceCheckUtils]: 12: Hoare triple {25043#true} call processEnvironment__before__lowWaterSensor(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,857 INFO L290 TraceCheckUtils]: 13: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {25043#true} is VALID [2022-02-20 18:13:25,857 INFO L290 TraceCheckUtils]: 14: Hoare triple {25043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,857 INFO L290 TraceCheckUtils]: 15: Hoare triple {25043#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,858 INFO L290 TraceCheckUtils]: 16: Hoare triple {25043#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {25043#true} is VALID [2022-02-20 18:13:25,858 INFO L290 TraceCheckUtils]: 17: Hoare triple {25043#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {25043#true} is VALID [2022-02-20 18:13:25,858 INFO L290 TraceCheckUtils]: 18: Hoare triple {25043#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {25043#true} is VALID [2022-02-20 18:13:25,858 INFO L290 TraceCheckUtils]: 19: Hoare triple {25043#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {25043#true} is VALID [2022-02-20 18:13:25,858 INFO L290 TraceCheckUtils]: 20: Hoare triple {25043#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,858 INFO L290 TraceCheckUtils]: 21: Hoare triple {25043#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L272 TraceCheckUtils]: 22: Hoare triple {25043#true} call activatePump__before__methaneQuery(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,859 INFO L290 TraceCheckUtils]: 23: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L290 TraceCheckUtils]: 24: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {25043#true} {25043#true} #344#return; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L290 TraceCheckUtils]: 26: Hoare triple {25043#true} assume { :end_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L290 TraceCheckUtils]: 27: Hoare triple {25043#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L290 TraceCheckUtils]: 28: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {25043#true} {25043#true} #398#return; {25043#true} is VALID [2022-02-20 18:13:25,859 INFO L290 TraceCheckUtils]: 30: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,860 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {25043#true} {25117#(not (= 0 ~systemActive~0))} #362#return; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,860 INFO L290 TraceCheckUtils]: 32: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,861 INFO L290 TraceCheckUtils]: 33: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,861 INFO L290 TraceCheckUtils]: 34: Hoare triple {25117#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,862 INFO L290 TraceCheckUtils]: 35: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,862 INFO L290 TraceCheckUtils]: 36: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,862 INFO L290 TraceCheckUtils]: 37: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,863 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25117#(not (= 0 ~systemActive~0))} {25066#(= 0 ~systemActive~0)} #388#return; {25044#false} is VALID [2022-02-20 18:13:25,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2022-02-20 18:13:25,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,865 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,866 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,866 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25044#false} #352#return; {25044#false} is VALID [2022-02-20 18:13:25,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-02-20 18:13:25,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:25,868 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,868 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,868 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25043#true} {25044#false} #364#return; {25044#false} is VALID [2022-02-20 18:13:25,868 INFO L290 TraceCheckUtils]: 0: Hoare triple {25043#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {25043#true} is VALID [2022-02-20 18:13:25,868 INFO L290 TraceCheckUtils]: 1: Hoare triple {25043#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,868 INFO L290 TraceCheckUtils]: 2: Hoare triple {25043#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L272 TraceCheckUtils]: 3: Hoare triple {25043#true} call select_features_#t~ret11#1 := select_one(); {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L290 TraceCheckUtils]: 4: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L290 TraceCheckUtils]: 5: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {25043#true} {25043#true} #370#return; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L290 TraceCheckUtils]: 7: Hoare triple {25043#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L272 TraceCheckUtils]: 8: Hoare triple {25043#true} call select_features_#t~ret12#1 := select_one(); {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L290 TraceCheckUtils]: 9: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L290 TraceCheckUtils]: 10: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,869 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {25043#true} {25043#true} #372#return; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L290 TraceCheckUtils]: 12: Hoare triple {25043#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L272 TraceCheckUtils]: 13: Hoare triple {25043#true} call select_features_#t~ret13#1 := select_one(); {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L290 TraceCheckUtils]: 14: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L290 TraceCheckUtils]: 15: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {25043#true} {25043#true} #374#return; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L290 TraceCheckUtils]: 17: Hoare triple {25043#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L272 TraceCheckUtils]: 18: Hoare triple {25043#true} call select_features_#t~ret14#1 := select_one(); {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L290 TraceCheckUtils]: 19: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,870 INFO L290 TraceCheckUtils]: 20: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {25043#true} {25043#true} #376#return; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L290 TraceCheckUtils]: 22: Hoare triple {25043#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L272 TraceCheckUtils]: 23: Hoare triple {25043#true} call select_features_#t~ret15#1 := select_one(); {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L290 TraceCheckUtils]: 24: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L290 TraceCheckUtils]: 25: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {25043#true} {25043#true} #378#return; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L290 TraceCheckUtils]: 27: Hoare triple {25043#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L272 TraceCheckUtils]: 28: Hoare triple {25043#true} call select_features_#t~ret16#1 := select_one(); {25043#true} is VALID [2022-02-20 18:13:25,871 INFO L290 TraceCheckUtils]: 29: Hoare triple {25043#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 30: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {25043#true} {25043#true} #380#return; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 32: Hoare triple {25043#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 33: Hoare triple {25043#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 34: Hoare triple {25043#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 35: Hoare triple {25043#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 36: Hoare triple {25043#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 37: Hoare triple {25043#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {25043#true} is VALID [2022-02-20 18:13:25,872 INFO L290 TraceCheckUtils]: 38: Hoare triple {25043#true} assume !false; {25043#true} is VALID [2022-02-20 18:13:25,873 INFO L290 TraceCheckUtils]: 39: Hoare triple {25043#true} assume test_~splverifierCounter~0#1 < 4; {25043#true} is VALID [2022-02-20 18:13:25,873 INFO L290 TraceCheckUtils]: 40: Hoare triple {25043#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {25043#true} is VALID [2022-02-20 18:13:25,873 INFO L290 TraceCheckUtils]: 41: Hoare triple {25043#true} assume 0 != test_~tmp~4#1; {25043#true} is VALID [2022-02-20 18:13:25,873 INFO L272 TraceCheckUtils]: 42: Hoare triple {25043#true} call waterRise(); {25112#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:13:25,873 INFO L290 TraceCheckUtils]: 43: Hoare triple {25112#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25043#true} is VALID [2022-02-20 18:13:25,873 INFO L290 TraceCheckUtils]: 44: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {25043#true} {25043#true} #382#return; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 46: Hoare triple {25043#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 47: Hoare triple {25043#true} assume !(0 != test_~tmp___0~0#1); {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 48: Hoare triple {25043#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 49: Hoare triple {25043#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet43#1 && test_#t~nondet43#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet43#1;havoc test_#t~nondet43#1; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 50: Hoare triple {25043#true} assume 0 != test_~tmp___1~0#1; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 51: Hoare triple {25043#true} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {25043#true} is VALID [2022-02-20 18:13:25,874 INFO L290 TraceCheckUtils]: 52: Hoare triple {25043#true} assume !(0 != ~pumpRunning~0); {25043#true} is VALID [2022-02-20 18:13:25,875 INFO L290 TraceCheckUtils]: 53: Hoare triple {25043#true} ~systemActive~0 := 0; {25066#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:13:25,875 INFO L290 TraceCheckUtils]: 54: Hoare triple {25066#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {25066#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:13:25,875 INFO L272 TraceCheckUtils]: 55: Hoare triple {25066#(= 0 ~systemActive~0)} call timeShift(); {25113#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:13:25,876 INFO L290 TraceCheckUtils]: 56: Hoare triple {25113#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L272 TraceCheckUtils]: 57: Hoare triple {25043#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L290 TraceCheckUtils]: 58: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L290 TraceCheckUtils]: 59: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {25043#true} {25043#true} #352#return; {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L290 TraceCheckUtils]: 61: Hoare triple {25043#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L290 TraceCheckUtils]: 62: Hoare triple {25043#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25043#true} is VALID [2022-02-20 18:13:25,876 INFO L290 TraceCheckUtils]: 63: Hoare triple {25043#true} assume !(0 != ~pumpRunning~0); {25043#true} is VALID [2022-02-20 18:13:25,877 INFO L290 TraceCheckUtils]: 64: Hoare triple {25043#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,877 INFO L290 TraceCheckUtils]: 65: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,877 INFO L272 TraceCheckUtils]: 66: Hoare triple {25117#(not (= 0 ~systemActive~0))} call processEnvironment__before__methaneAlarm(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,878 INFO L290 TraceCheckUtils]: 67: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {25043#true} is VALID [2022-02-20 18:13:25,878 INFO L272 TraceCheckUtils]: 68: Hoare triple {25043#true} call processEnvironment__before__lowWaterSensor(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,878 INFO L290 TraceCheckUtils]: 69: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {25043#true} is VALID [2022-02-20 18:13:25,878 INFO L290 TraceCheckUtils]: 70: Hoare triple {25043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,878 INFO L290 TraceCheckUtils]: 71: Hoare triple {25043#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {25043#true} is VALID [2022-02-20 18:13:25,878 INFO L290 TraceCheckUtils]: 72: Hoare triple {25043#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {25043#true} is VALID [2022-02-20 18:13:25,878 INFO L290 TraceCheckUtils]: 73: Hoare triple {25043#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {25043#true} is VALID [2022-02-20 18:13:25,879 INFO L290 TraceCheckUtils]: 74: Hoare triple {25043#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {25043#true} is VALID [2022-02-20 18:13:25,879 INFO L290 TraceCheckUtils]: 75: Hoare triple {25043#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {25043#true} is VALID [2022-02-20 18:13:25,879 INFO L290 TraceCheckUtils]: 76: Hoare triple {25043#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,879 INFO L290 TraceCheckUtils]: 77: Hoare triple {25043#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {25043#true} is VALID [2022-02-20 18:13:25,879 INFO L272 TraceCheckUtils]: 78: Hoare triple {25043#true} call activatePump__before__methaneQuery(); {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:25,879 INFO L290 TraceCheckUtils]: 79: Hoare triple {25139#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {25043#true} is VALID [2022-02-20 18:13:25,879 INFO L290 TraceCheckUtils]: 80: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {25043#true} {25043#true} #344#return; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L290 TraceCheckUtils]: 82: Hoare triple {25043#true} assume { :end_inline_activatePump } true; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L290 TraceCheckUtils]: 83: Hoare triple {25043#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L290 TraceCheckUtils]: 84: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {25043#true} {25043#true} #398#return; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L290 TraceCheckUtils]: 86: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,880 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {25043#true} {25117#(not (= 0 ~systemActive~0))} #362#return; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,881 INFO L290 TraceCheckUtils]: 88: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,881 INFO L290 TraceCheckUtils]: 89: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,881 INFO L290 TraceCheckUtils]: 90: Hoare triple {25117#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,882 INFO L290 TraceCheckUtils]: 91: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,882 INFO L290 TraceCheckUtils]: 92: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,887 INFO L290 TraceCheckUtils]: 93: Hoare triple {25117#(not (= 0 ~systemActive~0))} assume true; {25117#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:13:25,888 INFO L284 TraceCheckUtils]: 94: Hoare quadruple {25117#(not (= 0 ~systemActive~0))} {25066#(= 0 ~systemActive~0)} #388#return; {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 95: Hoare triple {25044#false} assume !false; {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 96: Hoare triple {25044#false} assume test_~splverifierCounter~0#1 < 4; {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 97: Hoare triple {25044#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 98: Hoare triple {25044#false} assume !(0 != test_~tmp~4#1); {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 99: Hoare triple {25044#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 100: Hoare triple {25044#false} assume !(0 != test_~tmp___0~0#1); {25044#false} is VALID [2022-02-20 18:13:25,888 INFO L290 TraceCheckUtils]: 101: Hoare triple {25044#false} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {25044#false} is VALID [2022-02-20 18:13:25,889 INFO L290 TraceCheckUtils]: 102: Hoare triple {25044#false} assume 0 != test_~tmp___2~0#1; {25044#false} is VALID [2022-02-20 18:13:25,889 INFO L290 TraceCheckUtils]: 103: Hoare triple {25044#false} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {25044#false} is VALID [2022-02-20 18:13:25,889 INFO L272 TraceCheckUtils]: 104: Hoare triple {25044#false} call timeShift(); {25044#false} is VALID [2022-02-20 18:13:25,889 INFO L290 TraceCheckUtils]: 105: Hoare triple {25044#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {25044#false} is VALID [2022-02-20 18:13:25,889 INFO L272 TraceCheckUtils]: 106: Hoare triple {25044#false} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {25043#true} is VALID [2022-02-20 18:13:25,889 INFO L290 TraceCheckUtils]: 107: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,889 INFO L290 TraceCheckUtils]: 108: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,889 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {25043#true} {25044#false} #352#return; {25044#false} is VALID [2022-02-20 18:13:25,889 INFO L290 TraceCheckUtils]: 110: Hoare triple {25044#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 111: Hoare triple {25044#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 112: Hoare triple {25044#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 113: Hoare triple {25044#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 114: Hoare triple {25044#false} assume { :end_inline_lowerWaterLevel } true; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 115: Hoare triple {25044#false} assume !(0 != ~systemActive~0); {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 116: Hoare triple {25044#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 117: Hoare triple {25044#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {25044#false} is VALID [2022-02-20 18:13:25,890 INFO L290 TraceCheckUtils]: 118: Hoare triple {25044#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {25044#false} is VALID [2022-02-20 18:13:25,891 INFO L272 TraceCheckUtils]: 119: Hoare triple {25044#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {25043#true} is VALID [2022-02-20 18:13:25,891 INFO L290 TraceCheckUtils]: 120: Hoare triple {25043#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {25043#true} is VALID [2022-02-20 18:13:25,891 INFO L290 TraceCheckUtils]: 121: Hoare triple {25043#true} assume true; {25043#true} is VALID [2022-02-20 18:13:25,891 INFO L284 TraceCheckUtils]: 122: Hoare quadruple {25043#true} {25044#false} #364#return; {25044#false} is VALID [2022-02-20 18:13:25,891 INFO L290 TraceCheckUtils]: 123: Hoare triple {25044#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {25044#false} is VALID [2022-02-20 18:13:25,891 INFO L290 TraceCheckUtils]: 124: Hoare triple {25044#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {25044#false} is VALID [2022-02-20 18:13:25,891 INFO L290 TraceCheckUtils]: 125: Hoare triple {25044#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {25044#false} is VALID [2022-02-20 18:13:25,891 INFO L290 TraceCheckUtils]: 126: Hoare triple {25044#false} assume !false; {25044#false} is VALID [2022-02-20 18:13:25,892 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-02-20 18:13:25,892 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:25,892 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [570594309] [2022-02-20 18:13:25,892 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [570594309] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:25,892 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:13:25,892 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:13:25,893 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010008257] [2022-02-20 18:13:25,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:25,894 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) Word has length 127 [2022-02-20 18:13:25,894 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:25,894 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-02-20 18:13:25,976 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 113 edges. 113 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:25,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:13:25,976 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:25,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:13:25,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:13:25,977 INFO L87 Difference]: Start difference. First operand 1169 states and 1579 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-02-20 18:13:27,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:27,638 INFO L93 Difference]: Finished difference Result 1932 states and 2592 transitions. [2022-02-20 18:13:27,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:13:27,638 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) Word has length 127 [2022-02-20 18:13:27,638 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:27,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-02-20 18:13:27,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 452 transitions. [2022-02-20 18:13:27,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-02-20 18:13:27,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 452 transitions. [2022-02-20 18:13:27,648 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 452 transitions. [2022-02-20 18:13:28,020 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:28,059 INFO L225 Difference]: With dead ends: 1932 [2022-02-20 18:13:28,059 INFO L226 Difference]: Without dead ends: 786 [2022-02-20 18:13:28,062 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:13:28,064 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 450 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 219 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 466 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 526 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 219 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:28,064 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [466 Valid, 456 Invalid, 526 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [219 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-02-20 18:13:28,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 786 states. [2022-02-20 18:13:28,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 786 to 754. [2022-02-20 18:13:28,239 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:28,241 INFO L82 GeneralOperation]: Start isEquivalent. First operand 786 states. Second operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2022-02-20 18:13:28,242 INFO L74 IsIncluded]: Start isIncluded. First operand 786 states. Second operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2022-02-20 18:13:28,243 INFO L87 Difference]: Start difference. First operand 786 states. Second operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2022-02-20 18:13:28,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:28,270 INFO L93 Difference]: Finished difference Result 786 states and 1030 transitions. [2022-02-20 18:13:28,270 INFO L276 IsEmpty]: Start isEmpty. Operand 786 states and 1030 transitions. [2022-02-20 18:13:28,273 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:28,273 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:28,274 INFO L74 IsIncluded]: Start isIncluded. First operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) Second operand 786 states. [2022-02-20 18:13:28,275 INFO L87 Difference]: Start difference. First operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) Second operand 786 states. [2022-02-20 18:13:28,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:28,307 INFO L93 Difference]: Finished difference Result 786 states and 1030 transitions. [2022-02-20 18:13:28,307 INFO L276 IsEmpty]: Start isEmpty. Operand 786 states and 1030 transitions. [2022-02-20 18:13:28,309 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:28,310 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:28,310 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:28,310 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:28,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2022-02-20 18:13:28,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 754 states to 754 states and 994 transitions. [2022-02-20 18:13:28,351 INFO L78 Accepts]: Start accepts. Automaton has 754 states and 994 transitions. Word has length 127 [2022-02-20 18:13:28,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:28,352 INFO L470 AbstractCegarLoop]: Abstraction has 754 states and 994 transitions. [2022-02-20 18:13:28,352 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-02-20 18:13:28,352 INFO L276 IsEmpty]: Start isEmpty. Operand 754 states and 994 transitions. [2022-02-20 18:13:28,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2022-02-20 18:13:28,354 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:28,354 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:28,355 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:13:28,355 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:28,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:28,355 INFO L85 PathProgramCache]: Analyzing trace with hash 534729444, now seen corresponding path program 1 times [2022-02-20 18:13:28,355 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:28,356 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [375103387] [2022-02-20 18:13:28,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:28,356 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:28,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:28,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,412 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,412 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,412 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #370#return; {30587#true} is VALID [2022-02-20 18:13:28,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:28,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,415 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,415 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,416 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #372#return; {30587#true} is VALID [2022-02-20 18:13:28,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:28,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,418 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,419 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,419 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #374#return; {30587#true} is VALID [2022-02-20 18:13:28,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:28,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,422 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,422 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,422 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #376#return; {30587#true} is VALID [2022-02-20 18:13:28,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:28,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,425 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,425 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,425 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #378#return; {30587#true} is VALID [2022-02-20 18:13:28,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:28,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,428 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,429 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,429 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #380#return; {30587#true} is VALID [2022-02-20 18:13:28,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:13:28,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,433 INFO L290 TraceCheckUtils]: 0: Hoare triple {30666#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30587#true} is VALID [2022-02-20 18:13:28,434 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,434 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #382#return; {30587#true} is VALID [2022-02-20 18:13:28,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:13:28,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:28,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,457 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30587#true} #352#return; {30587#true} is VALID [2022-02-20 18:13:28,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:13:28,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:28,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:28,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,478 INFO L290 TraceCheckUtils]: 0: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,478 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,479 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #344#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,479 INFO L290 TraceCheckUtils]: 0: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,479 INFO L290 TraceCheckUtils]: 1: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,480 INFO L290 TraceCheckUtils]: 2: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,480 INFO L290 TraceCheckUtils]: 3: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,480 INFO L290 TraceCheckUtils]: 4: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,481 INFO L290 TraceCheckUtils]: 5: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,481 INFO L290 TraceCheckUtils]: 6: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,481 INFO L290 TraceCheckUtils]: 7: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,482 INFO L290 TraceCheckUtils]: 8: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,482 INFO L272 TraceCheckUtils]: 9: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,488 INFO L290 TraceCheckUtils]: 10: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,489 INFO L290 TraceCheckUtils]: 11: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,489 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #344#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,490 INFO L290 TraceCheckUtils]: 13: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,490 INFO L290 TraceCheckUtils]: 14: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,490 INFO L290 TraceCheckUtils]: 15: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,491 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #398#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30587#true} is VALID [2022-02-20 18:13:28,492 INFO L272 TraceCheckUtils]: 1: Hoare triple {30587#true} call processEnvironment__before__lowWaterSensor(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,492 INFO L290 TraceCheckUtils]: 2: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,492 INFO L290 TraceCheckUtils]: 3: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,493 INFO L290 TraceCheckUtils]: 4: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,493 INFO L290 TraceCheckUtils]: 5: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,493 INFO L290 TraceCheckUtils]: 6: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,494 INFO L290 TraceCheckUtils]: 7: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,494 INFO L290 TraceCheckUtils]: 8: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,494 INFO L290 TraceCheckUtils]: 9: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,495 INFO L290 TraceCheckUtils]: 10: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,495 INFO L272 TraceCheckUtils]: 11: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,495 INFO L290 TraceCheckUtils]: 12: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,495 INFO L290 TraceCheckUtils]: 13: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,496 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #344#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,496 INFO L290 TraceCheckUtils]: 15: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,497 INFO L290 TraceCheckUtils]: 16: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,497 INFO L290 TraceCheckUtils]: 17: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,497 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #398#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,498 INFO L290 TraceCheckUtils]: 19: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,498 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #362#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,498 INFO L290 TraceCheckUtils]: 0: Hoare triple {30667#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30587#true} is VALID [2022-02-20 18:13:28,498 INFO L272 TraceCheckUtils]: 1: Hoare triple {30587#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {30587#true} is VALID [2022-02-20 18:13:28,499 INFO L290 TraceCheckUtils]: 2: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,499 INFO L290 TraceCheckUtils]: 3: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,499 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {30587#true} {30587#true} #352#return; {30587#true} is VALID [2022-02-20 18:13:28,499 INFO L290 TraceCheckUtils]: 5: Hoare triple {30587#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30587#true} is VALID [2022-02-20 18:13:28,499 INFO L290 TraceCheckUtils]: 6: Hoare triple {30587#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {30587#true} is VALID [2022-02-20 18:13:28,499 INFO L290 TraceCheckUtils]: 7: Hoare triple {30587#true} assume !(0 != ~pumpRunning~0); {30587#true} is VALID [2022-02-20 18:13:28,500 INFO L290 TraceCheckUtils]: 8: Hoare triple {30587#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {30587#true} is VALID [2022-02-20 18:13:28,500 INFO L290 TraceCheckUtils]: 9: Hoare triple {30587#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {30587#true} is VALID [2022-02-20 18:13:28,500 INFO L272 TraceCheckUtils]: 10: Hoare triple {30587#true} call processEnvironment__before__methaneAlarm(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,500 INFO L290 TraceCheckUtils]: 11: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30587#true} is VALID [2022-02-20 18:13:28,501 INFO L272 TraceCheckUtils]: 12: Hoare triple {30587#true} call processEnvironment__before__lowWaterSensor(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,501 INFO L290 TraceCheckUtils]: 13: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,501 INFO L290 TraceCheckUtils]: 14: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,502 INFO L290 TraceCheckUtils]: 15: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,502 INFO L290 TraceCheckUtils]: 16: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,502 INFO L290 TraceCheckUtils]: 17: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,503 INFO L290 TraceCheckUtils]: 18: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,503 INFO L290 TraceCheckUtils]: 19: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,503 INFO L290 TraceCheckUtils]: 20: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,504 INFO L290 TraceCheckUtils]: 21: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,504 INFO L272 TraceCheckUtils]: 22: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,504 INFO L290 TraceCheckUtils]: 23: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,504 INFO L290 TraceCheckUtils]: 24: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,505 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #344#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,505 INFO L290 TraceCheckUtils]: 26: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,505 INFO L290 TraceCheckUtils]: 27: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,506 INFO L290 TraceCheckUtils]: 28: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,506 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #398#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,506 INFO L290 TraceCheckUtils]: 30: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,507 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #362#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,507 INFO L290 TraceCheckUtils]: 32: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,508 INFO L290 TraceCheckUtils]: 33: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,508 INFO L290 TraceCheckUtils]: 34: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,508 INFO L290 TraceCheckUtils]: 35: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,509 INFO L290 TraceCheckUtils]: 36: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,509 INFO L290 TraceCheckUtils]: 37: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,509 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #388#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-02-20 18:13:28,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,513 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,513 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,514 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #352#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-02-20 18:13:28,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:28,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:28,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,528 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {30587#true} {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #350#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,528 INFO L290 TraceCheckUtils]: 0: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,528 INFO L272 TraceCheckUtils]: 1: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {30587#true} is VALID [2022-02-20 18:13:28,528 INFO L290 TraceCheckUtils]: 2: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,529 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {30587#true} {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #350#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,529 INFO L290 TraceCheckUtils]: 4: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,529 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {30587#true} #398#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,530 INFO L290 TraceCheckUtils]: 0: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30587#true} is VALID [2022-02-20 18:13:28,530 INFO L272 TraceCheckUtils]: 1: Hoare triple {30587#true} call processEnvironment__before__lowWaterSensor(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,530 INFO L290 TraceCheckUtils]: 2: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,530 INFO L272 TraceCheckUtils]: 3: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {30587#true} is VALID [2022-02-20 18:13:28,531 INFO L290 TraceCheckUtils]: 4: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,531 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {30587#true} {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #350#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,531 INFO L290 TraceCheckUtils]: 6: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,532 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {30587#true} #398#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,532 INFO L290 TraceCheckUtils]: 8: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,533 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #362#return; {30588#false} is VALID [2022-02-20 18:13:28,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-02-20 18:13:28,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,536 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,536 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,536 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {30587#true} {30588#false} #364#return; {30588#false} is VALID [2022-02-20 18:13:28,537 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {30587#true} is VALID [2022-02-20 18:13:28,537 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,537 INFO L290 TraceCheckUtils]: 2: Hoare triple {30587#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,537 INFO L272 TraceCheckUtils]: 3: Hoare triple {30587#true} call select_features_#t~ret11#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:28,537 INFO L290 TraceCheckUtils]: 4: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L290 TraceCheckUtils]: 5: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {30587#true} {30587#true} #370#return; {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L290 TraceCheckUtils]: 7: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L272 TraceCheckUtils]: 8: Hoare triple {30587#true} call select_features_#t~ret12#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L290 TraceCheckUtils]: 9: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L290 TraceCheckUtils]: 10: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,538 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {30587#true} {30587#true} #372#return; {30587#true} is VALID [2022-02-20 18:13:28,539 INFO L290 TraceCheckUtils]: 12: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {30587#true} is VALID [2022-02-20 18:13:28,539 INFO L272 TraceCheckUtils]: 13: Hoare triple {30587#true} call select_features_#t~ret13#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:28,539 INFO L290 TraceCheckUtils]: 14: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,539 INFO L290 TraceCheckUtils]: 15: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,539 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {30587#true} {30587#true} #374#return; {30587#true} is VALID [2022-02-20 18:13:28,539 INFO L290 TraceCheckUtils]: 17: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {30587#true} is VALID [2022-02-20 18:13:28,540 INFO L272 TraceCheckUtils]: 18: Hoare triple {30587#true} call select_features_#t~ret14#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:28,540 INFO L290 TraceCheckUtils]: 19: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,540 INFO L290 TraceCheckUtils]: 20: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,540 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {30587#true} {30587#true} #376#return; {30587#true} is VALID [2022-02-20 18:13:28,540 INFO L290 TraceCheckUtils]: 22: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {30587#true} is VALID [2022-02-20 18:13:28,540 INFO L272 TraceCheckUtils]: 23: Hoare triple {30587#true} call select_features_#t~ret15#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L290 TraceCheckUtils]: 24: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L290 TraceCheckUtils]: 25: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {30587#true} {30587#true} #378#return; {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L290 TraceCheckUtils]: 27: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L272 TraceCheckUtils]: 28: Hoare triple {30587#true} call select_features_#t~ret16#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L290 TraceCheckUtils]: 29: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:28,541 INFO L290 TraceCheckUtils]: 30: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,542 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {30587#true} {30587#true} #380#return; {30587#true} is VALID [2022-02-20 18:13:28,542 INFO L290 TraceCheckUtils]: 32: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {30587#true} is VALID [2022-02-20 18:13:28,542 INFO L290 TraceCheckUtils]: 33: Hoare triple {30587#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {30587#true} is VALID [2022-02-20 18:13:28,542 INFO L290 TraceCheckUtils]: 34: Hoare triple {30587#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {30587#true} is VALID [2022-02-20 18:13:28,542 INFO L290 TraceCheckUtils]: 35: Hoare triple {30587#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {30587#true} is VALID [2022-02-20 18:13:28,542 INFO L290 TraceCheckUtils]: 36: Hoare triple {30587#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {30587#true} is VALID [2022-02-20 18:13:28,543 INFO L290 TraceCheckUtils]: 37: Hoare triple {30587#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {30587#true} is VALID [2022-02-20 18:13:28,543 INFO L290 TraceCheckUtils]: 38: Hoare triple {30587#true} assume !false; {30587#true} is VALID [2022-02-20 18:13:28,543 INFO L290 TraceCheckUtils]: 39: Hoare triple {30587#true} assume test_~splverifierCounter~0#1 < 4; {30587#true} is VALID [2022-02-20 18:13:28,543 INFO L290 TraceCheckUtils]: 40: Hoare triple {30587#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {30587#true} is VALID [2022-02-20 18:13:28,543 INFO L290 TraceCheckUtils]: 41: Hoare triple {30587#true} assume 0 != test_~tmp~4#1; {30587#true} is VALID [2022-02-20 18:13:28,544 INFO L272 TraceCheckUtils]: 42: Hoare triple {30587#true} call waterRise(); {30666#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:13:28,544 INFO L290 TraceCheckUtils]: 43: Hoare triple {30666#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30587#true} is VALID [2022-02-20 18:13:28,544 INFO L290 TraceCheckUtils]: 44: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,544 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {30587#true} {30587#true} #382#return; {30587#true} is VALID [2022-02-20 18:13:28,544 INFO L290 TraceCheckUtils]: 46: Hoare triple {30587#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {30587#true} is VALID [2022-02-20 18:13:28,544 INFO L290 TraceCheckUtils]: 47: Hoare triple {30587#true} assume !(0 != test_~tmp___0~0#1); {30587#true} is VALID [2022-02-20 18:13:28,545 INFO L290 TraceCheckUtils]: 48: Hoare triple {30587#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {30587#true} is VALID [2022-02-20 18:13:28,545 INFO L290 TraceCheckUtils]: 49: Hoare triple {30587#true} assume 0 != test_~tmp___2~0#1; {30587#true} is VALID [2022-02-20 18:13:28,545 INFO L290 TraceCheckUtils]: 50: Hoare triple {30587#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {30587#true} is VALID [2022-02-20 18:13:28,545 INFO L272 TraceCheckUtils]: 51: Hoare triple {30587#true} call timeShift(); {30667#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:13:28,546 INFO L290 TraceCheckUtils]: 52: Hoare triple {30667#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30587#true} is VALID [2022-02-20 18:13:28,546 INFO L272 TraceCheckUtils]: 53: Hoare triple {30587#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {30587#true} is VALID [2022-02-20 18:13:28,546 INFO L290 TraceCheckUtils]: 54: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,546 INFO L290 TraceCheckUtils]: 55: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,546 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {30587#true} {30587#true} #352#return; {30587#true} is VALID [2022-02-20 18:13:28,546 INFO L290 TraceCheckUtils]: 57: Hoare triple {30587#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30587#true} is VALID [2022-02-20 18:13:28,547 INFO L290 TraceCheckUtils]: 58: Hoare triple {30587#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {30587#true} is VALID [2022-02-20 18:13:28,547 INFO L290 TraceCheckUtils]: 59: Hoare triple {30587#true} assume !(0 != ~pumpRunning~0); {30587#true} is VALID [2022-02-20 18:13:28,547 INFO L290 TraceCheckUtils]: 60: Hoare triple {30587#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {30587#true} is VALID [2022-02-20 18:13:28,547 INFO L290 TraceCheckUtils]: 61: Hoare triple {30587#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {30587#true} is VALID [2022-02-20 18:13:28,547 INFO L272 TraceCheckUtils]: 62: Hoare triple {30587#true} call processEnvironment__before__methaneAlarm(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,548 INFO L290 TraceCheckUtils]: 63: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30587#true} is VALID [2022-02-20 18:13:28,548 INFO L272 TraceCheckUtils]: 64: Hoare triple {30587#true} call processEnvironment__before__lowWaterSensor(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,548 INFO L290 TraceCheckUtils]: 65: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,549 INFO L290 TraceCheckUtils]: 66: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,549 INFO L290 TraceCheckUtils]: 67: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,549 INFO L290 TraceCheckUtils]: 68: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,550 INFO L290 TraceCheckUtils]: 69: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,550 INFO L290 TraceCheckUtils]: 70: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,550 INFO L290 TraceCheckUtils]: 71: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,551 INFO L290 TraceCheckUtils]: 72: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,551 INFO L290 TraceCheckUtils]: 73: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,551 INFO L272 TraceCheckUtils]: 74: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,552 INFO L290 TraceCheckUtils]: 75: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {30587#true} is VALID [2022-02-20 18:13:28,552 INFO L290 TraceCheckUtils]: 76: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,552 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #344#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,552 INFO L290 TraceCheckUtils]: 78: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,553 INFO L290 TraceCheckUtils]: 79: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,553 INFO L290 TraceCheckUtils]: 80: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,553 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #398#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,554 INFO L290 TraceCheckUtils]: 82: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,554 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #362#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,555 INFO L290 TraceCheckUtils]: 84: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,555 INFO L290 TraceCheckUtils]: 85: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,555 INFO L290 TraceCheckUtils]: 86: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,556 INFO L290 TraceCheckUtils]: 87: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,556 INFO L290 TraceCheckUtils]: 88: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,556 INFO L290 TraceCheckUtils]: 89: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,557 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #388#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,557 INFO L290 TraceCheckUtils]: 91: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,557 INFO L290 TraceCheckUtils]: 92: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0#1 < 4; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,558 INFO L290 TraceCheckUtils]: 93: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,558 INFO L290 TraceCheckUtils]: 94: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~4#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,558 INFO L290 TraceCheckUtils]: 95: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,559 INFO L290 TraceCheckUtils]: 96: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~0#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,559 INFO L290 TraceCheckUtils]: 97: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,559 INFO L290 TraceCheckUtils]: 98: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != test_~tmp___2~0#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,560 INFO L290 TraceCheckUtils]: 99: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,560 INFO L272 TraceCheckUtils]: 100: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call timeShift(); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,560 INFO L290 TraceCheckUtils]: 101: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,560 INFO L272 TraceCheckUtils]: 102: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {30587#true} is VALID [2022-02-20 18:13:28,561 INFO L290 TraceCheckUtils]: 103: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,561 INFO L290 TraceCheckUtils]: 104: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,561 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {30587#true} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #352#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,562 INFO L290 TraceCheckUtils]: 106: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,562 INFO L290 TraceCheckUtils]: 107: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,562 INFO L290 TraceCheckUtils]: 108: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,563 INFO L290 TraceCheckUtils]: 109: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,563 INFO L290 TraceCheckUtils]: 110: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_lowerWaterLevel } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,563 INFO L290 TraceCheckUtils]: 111: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,564 INFO L290 TraceCheckUtils]: 112: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:28,564 INFO L272 TraceCheckUtils]: 113: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__methaneAlarm(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,564 INFO L290 TraceCheckUtils]: 114: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30587#true} is VALID [2022-02-20 18:13:28,565 INFO L272 TraceCheckUtils]: 115: Hoare triple {30587#true} call processEnvironment__before__lowWaterSensor(); {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:28,565 INFO L290 TraceCheckUtils]: 116: Hoare triple {30692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,565 INFO L272 TraceCheckUtils]: 117: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {30587#true} is VALID [2022-02-20 18:13:28,565 INFO L290 TraceCheckUtils]: 118: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,566 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {30587#true} {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #350#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,566 INFO L290 TraceCheckUtils]: 120: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,566 INFO L284 TraceCheckUtils]: 121: Hoare quadruple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {30587#true} #398#return; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,567 INFO L290 TraceCheckUtils]: 122: Hoare triple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:13:28,567 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {30719#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #362#return; {30588#false} is VALID [2022-02-20 18:13:28,567 INFO L290 TraceCheckUtils]: 124: Hoare triple {30588#false} assume { :end_inline_processEnvironment } true; {30588#false} is VALID [2022-02-20 18:13:28,567 INFO L290 TraceCheckUtils]: 125: Hoare triple {30588#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {30588#false} is VALID [2022-02-20 18:13:28,568 INFO L290 TraceCheckUtils]: 126: Hoare triple {30588#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {30588#false} is VALID [2022-02-20 18:13:28,568 INFO L290 TraceCheckUtils]: 127: Hoare triple {30588#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {30588#false} is VALID [2022-02-20 18:13:28,568 INFO L272 TraceCheckUtils]: 128: Hoare triple {30588#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {30587#true} is VALID [2022-02-20 18:13:28,568 INFO L290 TraceCheckUtils]: 129: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:28,568 INFO L290 TraceCheckUtils]: 130: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:28,568 INFO L284 TraceCheckUtils]: 131: Hoare quadruple {30587#true} {30588#false} #364#return; {30588#false} is VALID [2022-02-20 18:13:28,569 INFO L290 TraceCheckUtils]: 132: Hoare triple {30588#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {30588#false} is VALID [2022-02-20 18:13:28,569 INFO L290 TraceCheckUtils]: 133: Hoare triple {30588#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {30588#false} is VALID [2022-02-20 18:13:28,569 INFO L290 TraceCheckUtils]: 134: Hoare triple {30588#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {30588#false} is VALID [2022-02-20 18:13:28,569 INFO L290 TraceCheckUtils]: 135: Hoare triple {30588#false} assume !false; {30588#false} is VALID [2022-02-20 18:13:28,569 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 21 proven. 5 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-02-20 18:13:28,570 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:28,570 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [375103387] [2022-02-20 18:13:28,570 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [375103387] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:13:28,570 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1129231598] [2022-02-20 18:13:28,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:28,571 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:13:28,571 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:13:28,576 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:13:28,577 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:13:28,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,705 INFO L263 TraceCheckSpWp]: Trace formula consists of 609 conjuncts, 3 conjunts are in the unsatisfiable core [2022-02-20 18:13:28,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:28,752 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:13:29,110 INFO L290 TraceCheckUtils]: 0: Hoare triple {30587#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {30587#true} is VALID [2022-02-20 18:13:29,110 INFO L290 TraceCheckUtils]: 1: Hoare triple {30587#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {30587#true} is VALID [2022-02-20 18:13:29,111 INFO L290 TraceCheckUtils]: 2: Hoare triple {30587#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {30587#true} is VALID [2022-02-20 18:13:29,111 INFO L272 TraceCheckUtils]: 3: Hoare triple {30587#true} call select_features_#t~ret11#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:29,111 INFO L290 TraceCheckUtils]: 4: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:29,111 INFO L290 TraceCheckUtils]: 5: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,111 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {30587#true} {30587#true} #370#return; {30587#true} is VALID [2022-02-20 18:13:29,111 INFO L290 TraceCheckUtils]: 7: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {30587#true} is VALID [2022-02-20 18:13:29,112 INFO L272 TraceCheckUtils]: 8: Hoare triple {30587#true} call select_features_#t~ret12#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:29,112 INFO L290 TraceCheckUtils]: 9: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:29,112 INFO L290 TraceCheckUtils]: 10: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,112 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {30587#true} {30587#true} #372#return; {30587#true} is VALID [2022-02-20 18:13:29,112 INFO L290 TraceCheckUtils]: 12: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {30587#true} is VALID [2022-02-20 18:13:29,112 INFO L272 TraceCheckUtils]: 13: Hoare triple {30587#true} call select_features_#t~ret13#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L290 TraceCheckUtils]: 14: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L290 TraceCheckUtils]: 15: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {30587#true} {30587#true} #374#return; {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L290 TraceCheckUtils]: 17: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L272 TraceCheckUtils]: 18: Hoare triple {30587#true} call select_features_#t~ret14#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L290 TraceCheckUtils]: 19: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:29,113 INFO L290 TraceCheckUtils]: 20: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,114 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {30587#true} {30587#true} #376#return; {30587#true} is VALID [2022-02-20 18:13:29,114 INFO L290 TraceCheckUtils]: 22: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {30587#true} is VALID [2022-02-20 18:13:29,114 INFO L272 TraceCheckUtils]: 23: Hoare triple {30587#true} call select_features_#t~ret15#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:29,114 INFO L290 TraceCheckUtils]: 24: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:29,114 INFO L290 TraceCheckUtils]: 25: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,114 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {30587#true} {30587#true} #378#return; {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L290 TraceCheckUtils]: 27: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L272 TraceCheckUtils]: 28: Hoare triple {30587#true} call select_features_#t~ret16#1 := select_one(); {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L290 TraceCheckUtils]: 29: Hoare triple {30587#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L290 TraceCheckUtils]: 30: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {30587#true} {30587#true} #380#return; {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L290 TraceCheckUtils]: 32: Hoare triple {30587#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {30587#true} is VALID [2022-02-20 18:13:29,115 INFO L290 TraceCheckUtils]: 33: Hoare triple {30587#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {30587#true} is VALID [2022-02-20 18:13:29,116 INFO L290 TraceCheckUtils]: 34: Hoare triple {30587#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {30587#true} is VALID [2022-02-20 18:13:29,116 INFO L290 TraceCheckUtils]: 35: Hoare triple {30587#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {30587#true} is VALID [2022-02-20 18:13:29,116 INFO L290 TraceCheckUtils]: 36: Hoare triple {30587#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {30587#true} is VALID [2022-02-20 18:13:29,116 INFO L290 TraceCheckUtils]: 37: Hoare triple {30587#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {30587#true} is VALID [2022-02-20 18:13:29,116 INFO L290 TraceCheckUtils]: 38: Hoare triple {30587#true} assume !false; {30587#true} is VALID [2022-02-20 18:13:29,116 INFO L290 TraceCheckUtils]: 39: Hoare triple {30587#true} assume test_~splverifierCounter~0#1 < 4; {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L290 TraceCheckUtils]: 40: Hoare triple {30587#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L290 TraceCheckUtils]: 41: Hoare triple {30587#true} assume 0 != test_~tmp~4#1; {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L272 TraceCheckUtils]: 42: Hoare triple {30587#true} call waterRise(); {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L290 TraceCheckUtils]: 43: Hoare triple {30587#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L290 TraceCheckUtils]: 44: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {30587#true} {30587#true} #382#return; {30587#true} is VALID [2022-02-20 18:13:29,117 INFO L290 TraceCheckUtils]: 46: Hoare triple {30587#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L290 TraceCheckUtils]: 47: Hoare triple {30587#true} assume !(0 != test_~tmp___0~0#1); {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L290 TraceCheckUtils]: 48: Hoare triple {30587#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L290 TraceCheckUtils]: 49: Hoare triple {30587#true} assume 0 != test_~tmp___2~0#1; {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L290 TraceCheckUtils]: 50: Hoare triple {30587#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L272 TraceCheckUtils]: 51: Hoare triple {30587#true} call timeShift(); {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L290 TraceCheckUtils]: 52: Hoare triple {30587#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30587#true} is VALID [2022-02-20 18:13:29,118 INFO L272 TraceCheckUtils]: 53: Hoare triple {30587#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {30587#true} is VALID [2022-02-20 18:13:29,119 INFO L290 TraceCheckUtils]: 54: Hoare triple {30587#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30587#true} is VALID [2022-02-20 18:13:29,119 INFO L290 TraceCheckUtils]: 55: Hoare triple {30587#true} assume true; {30587#true} is VALID [2022-02-20 18:13:29,119 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {30587#true} {30587#true} #352#return; {30587#true} is VALID [2022-02-20 18:13:29,119 INFO L290 TraceCheckUtils]: 57: Hoare triple {30587#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30587#true} is VALID [2022-02-20 18:13:29,119 INFO L290 TraceCheckUtils]: 58: Hoare triple {30587#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {30587#true} is VALID [2022-02-20 18:13:29,119 INFO L290 TraceCheckUtils]: 59: Hoare triple {30587#true} assume !(0 != ~pumpRunning~0); {30587#true} is VALID [2022-02-20 18:13:29,120 INFO L290 TraceCheckUtils]: 60: Hoare triple {30587#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {30587#true} is VALID [2022-02-20 18:13:29,120 INFO L290 TraceCheckUtils]: 61: Hoare triple {30587#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {30587#true} is VALID [2022-02-20 18:13:29,120 INFO L272 TraceCheckUtils]: 62: Hoare triple {30587#true} call processEnvironment__before__methaneAlarm(); {30587#true} is VALID [2022-02-20 18:13:29,120 INFO L290 TraceCheckUtils]: 63: Hoare triple {30587#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30587#true} is VALID [2022-02-20 18:13:29,120 INFO L272 TraceCheckUtils]: 64: Hoare triple {30587#true} call processEnvironment__before__lowWaterSensor(); {30587#true} is VALID [2022-02-20 18:13:29,121 INFO L290 TraceCheckUtils]: 65: Hoare triple {30587#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,121 INFO L290 TraceCheckUtils]: 66: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,121 INFO L290 TraceCheckUtils]: 67: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,122 INFO L290 TraceCheckUtils]: 68: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,122 INFO L290 TraceCheckUtils]: 69: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,123 INFO L290 TraceCheckUtils]: 70: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,123 INFO L290 TraceCheckUtils]: 71: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,123 INFO L290 TraceCheckUtils]: 72: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,124 INFO L290 TraceCheckUtils]: 73: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,124 INFO L272 TraceCheckUtils]: 74: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,124 INFO L290 TraceCheckUtils]: 75: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} ~pumpRunning~0 := 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,125 INFO L290 TraceCheckUtils]: 76: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,125 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #344#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,125 INFO L290 TraceCheckUtils]: 78: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,126 INFO L290 TraceCheckUtils]: 79: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,126 INFO L290 TraceCheckUtils]: 80: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,126 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #398#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,127 INFO L290 TraceCheckUtils]: 82: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,127 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #362#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,128 INFO L290 TraceCheckUtils]: 84: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,128 INFO L290 TraceCheckUtils]: 85: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,129 INFO L290 TraceCheckUtils]: 86: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,129 INFO L290 TraceCheckUtils]: 87: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,129 INFO L290 TraceCheckUtils]: 88: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,130 INFO L290 TraceCheckUtils]: 89: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,130 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30587#true} #388#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,130 INFO L290 TraceCheckUtils]: 91: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,131 INFO L290 TraceCheckUtils]: 92: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0#1 < 4; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,131 INFO L290 TraceCheckUtils]: 93: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,131 INFO L290 TraceCheckUtils]: 94: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~4#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,132 INFO L290 TraceCheckUtils]: 95: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,132 INFO L290 TraceCheckUtils]: 96: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~0#1); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,132 INFO L290 TraceCheckUtils]: 97: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,133 INFO L290 TraceCheckUtils]: 98: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != test_~tmp___2~0#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,133 INFO L290 TraceCheckUtils]: 99: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,134 INFO L272 TraceCheckUtils]: 100: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call timeShift(); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,134 INFO L290 TraceCheckUtils]: 101: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,134 INFO L272 TraceCheckUtils]: 102: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,135 INFO L290 TraceCheckUtils]: 103: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,135 INFO L290 TraceCheckUtils]: 104: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,135 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #352#return; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,136 INFO L290 TraceCheckUtils]: 106: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,136 INFO L290 TraceCheckUtils]: 107: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,137 INFO L290 TraceCheckUtils]: 108: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,137 INFO L290 TraceCheckUtils]: 109: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,137 INFO L290 TraceCheckUtils]: 110: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_lowerWaterLevel } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,138 INFO L290 TraceCheckUtils]: 111: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,138 INFO L290 TraceCheckUtils]: 112: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,138 INFO L272 TraceCheckUtils]: 113: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__methaneAlarm(); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,139 INFO L290 TraceCheckUtils]: 114: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,139 INFO L272 TraceCheckUtils]: 115: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__lowWaterSensor(); {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:13:29,139 INFO L290 TraceCheckUtils]: 116: Hoare triple {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L272 TraceCheckUtils]: 117: Hoare triple {30588#false} call processEnvironment__before__highWaterSensor(); {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L290 TraceCheckUtils]: 118: Hoare triple {30588#false} assume true; {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {30588#false} {30588#false} #350#return; {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L290 TraceCheckUtils]: 120: Hoare triple {30588#false} assume true; {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L284 TraceCheckUtils]: 121: Hoare quadruple {30588#false} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #398#return; {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L290 TraceCheckUtils]: 122: Hoare triple {30588#false} assume true; {30588#false} is VALID [2022-02-20 18:13:29,140 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {30588#false} {30649#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #362#return; {30588#false} is VALID [2022-02-20 18:13:29,141 INFO L290 TraceCheckUtils]: 124: Hoare triple {30588#false} assume { :end_inline_processEnvironment } true; {30588#false} is VALID [2022-02-20 18:13:29,141 INFO L290 TraceCheckUtils]: 125: Hoare triple {30588#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {30588#false} is VALID [2022-02-20 18:13:29,141 INFO L290 TraceCheckUtils]: 126: Hoare triple {30588#false} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {30588#false} is VALID [2022-02-20 18:13:29,141 INFO L290 TraceCheckUtils]: 127: Hoare triple {30588#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {30588#false} is VALID [2022-02-20 18:13:29,141 INFO L272 TraceCheckUtils]: 128: Hoare triple {30588#false} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {30588#false} is VALID [2022-02-20 18:13:29,141 INFO L290 TraceCheckUtils]: 129: Hoare triple {30588#false} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {30588#false} is VALID [2022-02-20 18:13:29,142 INFO L290 TraceCheckUtils]: 130: Hoare triple {30588#false} assume true; {30588#false} is VALID [2022-02-20 18:13:29,142 INFO L284 TraceCheckUtils]: 131: Hoare quadruple {30588#false} {30588#false} #364#return; {30588#false} is VALID [2022-02-20 18:13:29,142 INFO L290 TraceCheckUtils]: 132: Hoare triple {30588#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {30588#false} is VALID [2022-02-20 18:13:29,142 INFO L290 TraceCheckUtils]: 133: Hoare triple {30588#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {30588#false} is VALID [2022-02-20 18:13:29,142 INFO L290 TraceCheckUtils]: 134: Hoare triple {30588#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {30588#false} is VALID [2022-02-20 18:13:29,142 INFO L290 TraceCheckUtils]: 135: Hoare triple {30588#false} assume !false; {30588#false} is VALID [2022-02-20 18:13:29,143 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:13:29,143 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:13:29,143 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1129231598] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:13:29,143 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:13:29,144 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-02-20 18:13:29,144 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493997807] [2022-02-20 18:13:29,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:13:29,145 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 136 [2022-02-20 18:13:29,145 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:29,145 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:13:29,235 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 126 edges. 126 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:29,236 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:13:29,236 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:29,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:13:29,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:13:29,237 INFO L87 Difference]: Start difference. First operand 754 states and 994 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:13:29,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:29,777 INFO L93 Difference]: Finished difference Result 1671 states and 2245 transitions. [2022-02-20 18:13:29,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:13:29,778 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 136 [2022-02-20 18:13:29,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:29,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:13:29,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 407 transitions. [2022-02-20 18:13:29,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:13:29,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 407 transitions. [2022-02-20 18:13:29,786 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 407 transitions. [2022-02-20 18:13:30,081 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 407 edges. 407 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:30,142 INFO L225 Difference]: With dead ends: 1671 [2022-02-20 18:13:30,142 INFO L226 Difference]: Without dead ends: 940 [2022-02-20 18:13:30,146 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:13:30,146 INFO L933 BasicCegarLoop]: 249 mSDtfsCounter, 94 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:30,147 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [94 Valid, 350 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:13:30,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2022-02-20 18:13:30,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 940. [2022-02-20 18:13:30,373 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:30,375 INFO L82 GeneralOperation]: Start isEquivalent. First operand 940 states. Second operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2022-02-20 18:13:30,376 INFO L74 IsIncluded]: Start isIncluded. First operand 940 states. Second operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2022-02-20 18:13:30,378 INFO L87 Difference]: Start difference. First operand 940 states. Second operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2022-02-20 18:13:30,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:30,422 INFO L93 Difference]: Finished difference Result 940 states and 1225 transitions. [2022-02-20 18:13:30,422 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1225 transitions. [2022-02-20 18:13:30,425 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:30,426 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:30,428 INFO L74 IsIncluded]: Start isIncluded. First operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) Second operand 940 states. [2022-02-20 18:13:30,429 INFO L87 Difference]: Start difference. First operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) Second operand 940 states. [2022-02-20 18:13:30,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:30,473 INFO L93 Difference]: Finished difference Result 940 states and 1225 transitions. [2022-02-20 18:13:30,473 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1225 transitions. [2022-02-20 18:13:30,476 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:30,476 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:30,476 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:30,477 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:30,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2022-02-20 18:13:30,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 940 states to 940 states and 1225 transitions. [2022-02-20 18:13:30,539 INFO L78 Accepts]: Start accepts. Automaton has 940 states and 1225 transitions. Word has length 136 [2022-02-20 18:13:30,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:30,539 INFO L470 AbstractCegarLoop]: Abstraction has 940 states and 1225 transitions. [2022-02-20 18:13:30,540 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:13:30,540 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1225 transitions. [2022-02-20 18:13:30,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-02-20 18:13:30,543 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:13:30,543 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:30,580 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:13:30,761 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:13:30,761 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:13:30,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:13:30,762 INFO L85 PathProgramCache]: Analyzing trace with hash -727153918, now seen corresponding path program 1 times [2022-02-20 18:13:30,762 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:13:30,762 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [567018745] [2022-02-20 18:13:30,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:30,762 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:13:30,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:13:30,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,856 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:30,856 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,857 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #370#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:13:30,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,861 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:30,861 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,862 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #372#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:13:30,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,866 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:30,866 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,866 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #374#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:13:30,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:30,873 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,874 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #376#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:13:30,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,879 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:30,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,880 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #378#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:13:30,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:30,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,888 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #380#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:13:30,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,907 INFO L290 TraceCheckUtils]: 0: Hoare triple {36786#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36702#true} is VALID [2022-02-20 18:13:30,908 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,908 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #382#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:30,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:13:30,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:30,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,950 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:30,950 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,950 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36702#true} #352#return; {36702#true} is VALID [2022-02-20 18:13:30,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:13:30,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:30,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:13:30,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:30,981 INFO L290 TraceCheckUtils]: 0: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,982 INFO L290 TraceCheckUtils]: 1: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,982 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,983 INFO L290 TraceCheckUtils]: 0: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:30,983 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:30,983 INFO L290 TraceCheckUtils]: 2: Hoare triple {36702#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:30,983 INFO L290 TraceCheckUtils]: 3: Hoare triple {36702#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {36702#true} is VALID [2022-02-20 18:13:30,983 INFO L290 TraceCheckUtils]: 4: Hoare triple {36702#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {36702#true} is VALID [2022-02-20 18:13:30,984 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {36702#true} is VALID [2022-02-20 18:13:30,984 INFO L290 TraceCheckUtils]: 6: Hoare triple {36702#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {36702#true} is VALID [2022-02-20 18:13:30,984 INFO L290 TraceCheckUtils]: 7: Hoare triple {36702#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {36702#true} is VALID [2022-02-20 18:13:30,984 INFO L290 TraceCheckUtils]: 8: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {36702#true} is VALID [2022-02-20 18:13:30,984 INFO L272 TraceCheckUtils]: 9: Hoare triple {36702#true} call activatePump__before__methaneQuery(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:30,985 INFO L290 TraceCheckUtils]: 10: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,985 INFO L290 TraceCheckUtils]: 11: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,986 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,986 INFO L290 TraceCheckUtils]: 13: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,986 INFO L290 TraceCheckUtils]: 14: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,987 INFO L290 TraceCheckUtils]: 15: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,987 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #398#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,987 INFO L290 TraceCheckUtils]: 0: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:30,988 INFO L272 TraceCheckUtils]: 1: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:30,988 INFO L290 TraceCheckUtils]: 2: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:30,988 INFO L290 TraceCheckUtils]: 3: Hoare triple {36702#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:30,988 INFO L290 TraceCheckUtils]: 4: Hoare triple {36702#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:30,989 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {36702#true} is VALID [2022-02-20 18:13:30,989 INFO L290 TraceCheckUtils]: 6: Hoare triple {36702#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {36702#true} is VALID [2022-02-20 18:13:30,989 INFO L290 TraceCheckUtils]: 7: Hoare triple {36702#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {36702#true} is VALID [2022-02-20 18:13:30,989 INFO L290 TraceCheckUtils]: 8: Hoare triple {36702#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {36702#true} is VALID [2022-02-20 18:13:30,989 INFO L290 TraceCheckUtils]: 9: Hoare triple {36702#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {36702#true} is VALID [2022-02-20 18:13:30,989 INFO L290 TraceCheckUtils]: 10: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {36702#true} is VALID [2022-02-20 18:13:30,990 INFO L272 TraceCheckUtils]: 11: Hoare triple {36702#true} call activatePump__before__methaneQuery(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:30,990 INFO L290 TraceCheckUtils]: 12: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,991 INFO L290 TraceCheckUtils]: 13: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,991 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,991 INFO L290 TraceCheckUtils]: 15: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,992 INFO L290 TraceCheckUtils]: 16: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,992 INFO L290 TraceCheckUtils]: 17: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,993 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #398#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,993 INFO L290 TraceCheckUtils]: 19: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,993 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #362#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,994 INFO L290 TraceCheckUtils]: 0: Hoare triple {36787#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:30,994 INFO L272 TraceCheckUtils]: 1: Hoare triple {36702#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:30,994 INFO L290 TraceCheckUtils]: 2: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:30,994 INFO L290 TraceCheckUtils]: 3: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:30,994 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {36702#true} {36702#true} #352#return; {36702#true} is VALID [2022-02-20 18:13:30,994 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:30,994 INFO L290 TraceCheckUtils]: 6: Hoare triple {36702#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {36702#true} is VALID [2022-02-20 18:13:30,995 INFO L290 TraceCheckUtils]: 7: Hoare triple {36702#true} assume !(0 != ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:30,995 INFO L290 TraceCheckUtils]: 8: Hoare triple {36702#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {36702#true} is VALID [2022-02-20 18:13:30,995 INFO L290 TraceCheckUtils]: 9: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {36702#true} is VALID [2022-02-20 18:13:30,995 INFO L272 TraceCheckUtils]: 10: Hoare triple {36702#true} call processEnvironment__before__methaneAlarm(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:30,996 INFO L290 TraceCheckUtils]: 11: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:30,996 INFO L272 TraceCheckUtils]: 12: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:30,996 INFO L290 TraceCheckUtils]: 13: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:30,996 INFO L290 TraceCheckUtils]: 14: Hoare triple {36702#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:30,996 INFO L290 TraceCheckUtils]: 15: Hoare triple {36702#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:30,997 INFO L290 TraceCheckUtils]: 16: Hoare triple {36702#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {36702#true} is VALID [2022-02-20 18:13:30,997 INFO L290 TraceCheckUtils]: 17: Hoare triple {36702#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {36702#true} is VALID [2022-02-20 18:13:30,997 INFO L290 TraceCheckUtils]: 18: Hoare triple {36702#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {36702#true} is VALID [2022-02-20 18:13:30,997 INFO L290 TraceCheckUtils]: 19: Hoare triple {36702#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {36702#true} is VALID [2022-02-20 18:13:30,997 INFO L290 TraceCheckUtils]: 20: Hoare triple {36702#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {36702#true} is VALID [2022-02-20 18:13:30,997 INFO L290 TraceCheckUtils]: 21: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {36702#true} is VALID [2022-02-20 18:13:30,998 INFO L272 TraceCheckUtils]: 22: Hoare triple {36702#true} call activatePump__before__methaneQuery(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:30,998 INFO L290 TraceCheckUtils]: 23: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,999 INFO L290 TraceCheckUtils]: 24: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,999 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:30,999 INFO L290 TraceCheckUtils]: 26: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,000 INFO L290 TraceCheckUtils]: 27: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,000 INFO L290 TraceCheckUtils]: 28: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,001 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #398#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,001 INFO L290 TraceCheckUtils]: 30: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,001 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #362#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,002 INFO L290 TraceCheckUtils]: 32: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,002 INFO L290 TraceCheckUtils]: 33: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,002 INFO L290 TraceCheckUtils]: 34: Hoare triple {36812#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,003 INFO L290 TraceCheckUtils]: 35: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,003 INFO L290 TraceCheckUtils]: 36: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,004 INFO L290 TraceCheckUtils]: 37: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,004 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36704#(= 1 ~systemActive~0)} #388#return; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-02-20 18:13:31,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,017 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:31,018 INFO L290 TraceCheckUtils]: 1: Hoare triple {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:31,018 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} {36765#(not (= ~pumpRunning~0 0))} #352#return; {36769#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1| 0))} is VALID [2022-02-20 18:13:31,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-02-20 18:13:31,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:13:31,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:13:31,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,031 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,031 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {36702#true} {36702#true} #348#return; {36702#true} is VALID [2022-02-20 18:13:31,031 INFO L290 TraceCheckUtils]: 0: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:31,032 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume !(0 == ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:31,032 INFO L272 TraceCheckUtils]: 2: Hoare triple {36702#true} call processEnvironment__before__highWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:31,032 INFO L290 TraceCheckUtils]: 3: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,032 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {36702#true} {36702#true} #348#return; {36702#true} is VALID [2022-02-20 18:13:31,032 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36702#true} is VALID [2022-02-20 18:13:31,032 INFO L290 TraceCheckUtils]: 6: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,033 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {36702#true} {36702#true} #398#return; {36702#true} is VALID [2022-02-20 18:13:31,033 INFO L290 TraceCheckUtils]: 0: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:31,033 INFO L272 TraceCheckUtils]: 1: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:31,033 INFO L290 TraceCheckUtils]: 2: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L290 TraceCheckUtils]: 3: Hoare triple {36702#true} assume !(0 == ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L272 TraceCheckUtils]: 4: Hoare triple {36702#true} call processEnvironment__before__highWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {36702#true} {36702#true} #348#return; {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L290 TraceCheckUtils]: 7: Hoare triple {36702#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L290 TraceCheckUtils]: 8: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,034 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {36702#true} {36702#true} #398#return; {36702#true} is VALID [2022-02-20 18:13:31,035 INFO L290 TraceCheckUtils]: 10: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,035 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {36702#true} {36770#(not (= ~switchedOnBeforeTS~0 0))} #362#return; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2022-02-20 18:13:31,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,039 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:31,040 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,040 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36702#true} {36770#(not (= ~switchedOnBeforeTS~0 0))} #364#return; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,042 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,043 INFO L290 TraceCheckUtils]: 1: Hoare triple {36704#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,043 INFO L290 TraceCheckUtils]: 2: Hoare triple {36704#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,043 INFO L272 TraceCheckUtils]: 3: Hoare triple {36704#(= 1 ~systemActive~0)} call select_features_#t~ret11#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,044 INFO L290 TraceCheckUtils]: 4: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,044 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,044 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #370#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,045 INFO L290 TraceCheckUtils]: 7: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,045 INFO L272 TraceCheckUtils]: 8: Hoare triple {36704#(= 1 ~systemActive~0)} call select_features_#t~ret12#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,045 INFO L290 TraceCheckUtils]: 9: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,045 INFO L290 TraceCheckUtils]: 10: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,046 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #372#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,046 INFO L290 TraceCheckUtils]: 12: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,046 INFO L272 TraceCheckUtils]: 13: Hoare triple {36704#(= 1 ~systemActive~0)} call select_features_#t~ret13#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,046 INFO L290 TraceCheckUtils]: 14: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,046 INFO L290 TraceCheckUtils]: 15: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,047 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #374#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,047 INFO L290 TraceCheckUtils]: 17: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,048 INFO L272 TraceCheckUtils]: 18: Hoare triple {36704#(= 1 ~systemActive~0)} call select_features_#t~ret14#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,048 INFO L290 TraceCheckUtils]: 19: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,048 INFO L290 TraceCheckUtils]: 20: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,051 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #376#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,051 INFO L290 TraceCheckUtils]: 22: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,051 INFO L272 TraceCheckUtils]: 23: Hoare triple {36704#(= 1 ~systemActive~0)} call select_features_#t~ret15#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,052 INFO L290 TraceCheckUtils]: 24: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,052 INFO L290 TraceCheckUtils]: 25: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,052 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #378#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,053 INFO L290 TraceCheckUtils]: 27: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,053 INFO L272 TraceCheckUtils]: 28: Hoare triple {36704#(= 1 ~systemActive~0)} call select_features_#t~ret16#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,053 INFO L290 TraceCheckUtils]: 29: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,053 INFO L290 TraceCheckUtils]: 30: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,054 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #380#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,054 INFO L290 TraceCheckUtils]: 32: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,055 INFO L290 TraceCheckUtils]: 33: Hoare triple {36704#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,055 INFO L290 TraceCheckUtils]: 34: Hoare triple {36704#(= 1 ~systemActive~0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,056 INFO L290 TraceCheckUtils]: 35: Hoare triple {36704#(= 1 ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,056 INFO L290 TraceCheckUtils]: 36: Hoare triple {36704#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,056 INFO L290 TraceCheckUtils]: 37: Hoare triple {36704#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,057 INFO L290 TraceCheckUtils]: 38: Hoare triple {36704#(= 1 ~systemActive~0)} assume !false; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,057 INFO L290 TraceCheckUtils]: 39: Hoare triple {36704#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,058 INFO L290 TraceCheckUtils]: 40: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,082 INFO L290 TraceCheckUtils]: 41: Hoare triple {36704#(= 1 ~systemActive~0)} assume 0 != test_~tmp~4#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,083 INFO L272 TraceCheckUtils]: 42: Hoare triple {36704#(= 1 ~systemActive~0)} call waterRise(); {36786#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:13:31,083 INFO L290 TraceCheckUtils]: 43: Hoare triple {36786#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36702#true} is VALID [2022-02-20 18:13:31,083 INFO L290 TraceCheckUtils]: 44: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,084 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {36702#true} {36704#(= 1 ~systemActive~0)} #382#return; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,084 INFO L290 TraceCheckUtils]: 46: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,084 INFO L290 TraceCheckUtils]: 47: Hoare triple {36704#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~0#1); {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,085 INFO L290 TraceCheckUtils]: 48: Hoare triple {36704#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,085 INFO L290 TraceCheckUtils]: 49: Hoare triple {36704#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,086 INFO L290 TraceCheckUtils]: 50: Hoare triple {36704#(= 1 ~systemActive~0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {36704#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:13:31,086 INFO L272 TraceCheckUtils]: 51: Hoare triple {36704#(= 1 ~systemActive~0)} call timeShift(); {36787#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 52: Hoare triple {36787#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L272 TraceCheckUtils]: 53: Hoare triple {36702#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 54: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 55: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {36702#true} {36702#true} #352#return; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 57: Hoare triple {36702#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 58: Hoare triple {36702#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 59: Hoare triple {36702#true} assume !(0 != ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 60: Hoare triple {36702#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {36702#true} is VALID [2022-02-20 18:13:31,087 INFO L290 TraceCheckUtils]: 61: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {36702#true} is VALID [2022-02-20 18:13:31,088 INFO L272 TraceCheckUtils]: 62: Hoare triple {36702#true} call processEnvironment__before__methaneAlarm(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:31,088 INFO L290 TraceCheckUtils]: 63: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:31,088 INFO L272 TraceCheckUtils]: 64: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 65: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 66: Hoare triple {36702#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 67: Hoare triple {36702#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 68: Hoare triple {36702#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 69: Hoare triple {36702#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 70: Hoare triple {36702#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 71: Hoare triple {36702#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 72: Hoare triple {36702#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {36702#true} is VALID [2022-02-20 18:13:31,089 INFO L290 TraceCheckUtils]: 73: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {36702#true} is VALID [2022-02-20 18:13:31,090 INFO L272 TraceCheckUtils]: 74: Hoare triple {36702#true} call activatePump__before__methaneQuery(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:31,090 INFO L290 TraceCheckUtils]: 75: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,091 INFO L290 TraceCheckUtils]: 76: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,091 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,091 INFO L290 TraceCheckUtils]: 78: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,092 INFO L290 TraceCheckUtils]: 79: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,092 INFO L290 TraceCheckUtils]: 80: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,093 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #398#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,093 INFO L290 TraceCheckUtils]: 82: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,093 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #362#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,094 INFO L290 TraceCheckUtils]: 84: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,094 INFO L290 TraceCheckUtils]: 85: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,094 INFO L290 TraceCheckUtils]: 86: Hoare triple {36812#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,095 INFO L290 TraceCheckUtils]: 87: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,095 INFO L290 TraceCheckUtils]: 88: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,095 INFO L290 TraceCheckUtils]: 89: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,096 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36704#(= 1 ~systemActive~0)} #388#return; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,096 INFO L290 TraceCheckUtils]: 91: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume !false; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,097 INFO L290 TraceCheckUtils]: 92: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,097 INFO L290 TraceCheckUtils]: 93: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,097 INFO L290 TraceCheckUtils]: 94: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~4#1); {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,098 INFO L290 TraceCheckUtils]: 95: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,098 INFO L290 TraceCheckUtils]: 96: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~0#1); {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,098 INFO L290 TraceCheckUtils]: 97: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,099 INFO L290 TraceCheckUtils]: 98: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,099 INFO L290 TraceCheckUtils]: 99: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,099 INFO L272 TraceCheckUtils]: 100: Hoare triple {36765#(not (= ~pumpRunning~0 0))} call timeShift(); {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,100 INFO L290 TraceCheckUtils]: 101: Hoare triple {36765#(not (= ~pumpRunning~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36765#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:13:31,100 INFO L272 TraceCheckUtils]: 102: Hoare triple {36765#(not (= ~pumpRunning~0 0))} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:31,100 INFO L290 TraceCheckUtils]: 103: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:31,101 INFO L290 TraceCheckUtils]: 104: Hoare triple {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:13:31,101 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {36834#(= ~pumpRunning~0 |isPumpRunning_#res|)} {36765#(not (= ~pumpRunning~0 0))} #352#return; {36769#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1| 0))} is VALID [2022-02-20 18:13:31,102 INFO L290 TraceCheckUtils]: 106: Hoare triple {36769#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1| 0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,102 INFO L290 TraceCheckUtils]: 107: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,102 INFO L290 TraceCheckUtils]: 108: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,103 INFO L290 TraceCheckUtils]: 109: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,103 INFO L290 TraceCheckUtils]: 110: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_lowerWaterLevel } true; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,103 INFO L290 TraceCheckUtils]: 111: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,104 INFO L290 TraceCheckUtils]: 112: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,104 INFO L272 TraceCheckUtils]: 113: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} call processEnvironment__before__methaneAlarm(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:31,104 INFO L290 TraceCheckUtils]: 114: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:31,105 INFO L272 TraceCheckUtils]: 115: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:13:31,105 INFO L290 TraceCheckUtils]: 116: Hoare triple {36813#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:31,105 INFO L290 TraceCheckUtils]: 117: Hoare triple {36702#true} assume !(0 == ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:31,105 INFO L272 TraceCheckUtils]: 118: Hoare triple {36702#true} call processEnvironment__before__highWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:31,106 INFO L290 TraceCheckUtils]: 119: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,106 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {36702#true} {36702#true} #348#return; {36702#true} is VALID [2022-02-20 18:13:31,106 INFO L290 TraceCheckUtils]: 121: Hoare triple {36702#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36702#true} is VALID [2022-02-20 18:13:31,106 INFO L290 TraceCheckUtils]: 122: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,106 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {36702#true} {36702#true} #398#return; {36702#true} is VALID [2022-02-20 18:13:31,106 INFO L290 TraceCheckUtils]: 124: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,107 INFO L284 TraceCheckUtils]: 125: Hoare quadruple {36702#true} {36770#(not (= ~switchedOnBeforeTS~0 0))} #362#return; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,107 INFO L290 TraceCheckUtils]: 126: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_processEnvironment } true; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,107 INFO L290 TraceCheckUtils]: 127: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,108 INFO L290 TraceCheckUtils]: 128: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,108 INFO L290 TraceCheckUtils]: 129: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,108 INFO L272 TraceCheckUtils]: 130: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:31,108 INFO L290 TraceCheckUtils]: 131: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:31,109 INFO L290 TraceCheckUtils]: 132: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,109 INFO L284 TraceCheckUtils]: 133: Hoare quadruple {36702#true} {36770#(not (= ~switchedOnBeforeTS~0 0))} #364#return; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,109 INFO L290 TraceCheckUtils]: 134: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,110 INFO L290 TraceCheckUtils]: 135: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {36770#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:13:31,110 INFO L290 TraceCheckUtils]: 136: Hoare triple {36770#(not (= ~switchedOnBeforeTS~0 0))} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {36703#false} is VALID [2022-02-20 18:13:31,110 INFO L290 TraceCheckUtils]: 137: Hoare triple {36703#false} assume !false; {36703#false} is VALID [2022-02-20 18:13:31,111 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 9 proven. 22 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-02-20 18:13:31,111 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:13:31,111 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [567018745] [2022-02-20 18:13:31,111 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [567018745] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:13:31,111 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2038355714] [2022-02-20 18:13:31,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:13:31,112 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:13:31,112 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:13:31,113 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:13:31,115 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:13:31,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,251 INFO L263 TraceCheckSpWp]: Trace formula consists of 610 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:13:31,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:13:31,292 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:13:31,845 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {36702#true} is VALID [2022-02-20 18:13:31,846 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {36702#true} is VALID [2022-02-20 18:13:31,846 INFO L290 TraceCheckUtils]: 2: Hoare triple {36702#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {36702#true} is VALID [2022-02-20 18:13:31,846 INFO L272 TraceCheckUtils]: 3: Hoare triple {36702#true} call select_features_#t~ret11#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,846 INFO L290 TraceCheckUtils]: 4: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,846 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,846 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {36702#true} {36702#true} #370#return; {36702#true} is VALID [2022-02-20 18:13:31,847 INFO L290 TraceCheckUtils]: 7: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {36702#true} is VALID [2022-02-20 18:13:31,847 INFO L272 TraceCheckUtils]: 8: Hoare triple {36702#true} call select_features_#t~ret12#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,847 INFO L290 TraceCheckUtils]: 9: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,847 INFO L290 TraceCheckUtils]: 10: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,847 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {36702#true} {36702#true} #372#return; {36702#true} is VALID [2022-02-20 18:13:31,847 INFO L290 TraceCheckUtils]: 12: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L272 TraceCheckUtils]: 13: Hoare triple {36702#true} call select_features_#t~ret13#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L290 TraceCheckUtils]: 14: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L290 TraceCheckUtils]: 15: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {36702#true} {36702#true} #374#return; {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L290 TraceCheckUtils]: 17: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L272 TraceCheckUtils]: 18: Hoare triple {36702#true} call select_features_#t~ret14#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,848 INFO L290 TraceCheckUtils]: 19: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,849 INFO L290 TraceCheckUtils]: 20: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,849 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {36702#true} {36702#true} #376#return; {36702#true} is VALID [2022-02-20 18:13:31,849 INFO L290 TraceCheckUtils]: 22: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {36702#true} is VALID [2022-02-20 18:13:31,849 INFO L272 TraceCheckUtils]: 23: Hoare triple {36702#true} call select_features_#t~ret15#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,849 INFO L290 TraceCheckUtils]: 24: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,849 INFO L290 TraceCheckUtils]: 25: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,850 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {36702#true} {36702#true} #378#return; {36702#true} is VALID [2022-02-20 18:13:31,850 INFO L290 TraceCheckUtils]: 27: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {36702#true} is VALID [2022-02-20 18:13:31,850 INFO L272 TraceCheckUtils]: 28: Hoare triple {36702#true} call select_features_#t~ret16#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:31,851 INFO L290 TraceCheckUtils]: 29: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:31,851 INFO L290 TraceCheckUtils]: 30: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,851 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {36702#true} {36702#true} #380#return; {36702#true} is VALID [2022-02-20 18:13:31,852 INFO L290 TraceCheckUtils]: 32: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {36702#true} is VALID [2022-02-20 18:13:31,852 INFO L290 TraceCheckUtils]: 33: Hoare triple {36702#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {36702#true} is VALID [2022-02-20 18:13:31,852 INFO L290 TraceCheckUtils]: 34: Hoare triple {36702#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {36702#true} is VALID [2022-02-20 18:13:31,852 INFO L290 TraceCheckUtils]: 35: Hoare triple {36702#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {36702#true} is VALID [2022-02-20 18:13:31,852 INFO L290 TraceCheckUtils]: 36: Hoare triple {36702#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {36702#true} is VALID [2022-02-20 18:13:31,852 INFO L290 TraceCheckUtils]: 37: Hoare triple {36702#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {36702#true} is VALID [2022-02-20 18:13:31,853 INFO L290 TraceCheckUtils]: 38: Hoare triple {36702#true} assume !false; {36702#true} is VALID [2022-02-20 18:13:31,853 INFO L290 TraceCheckUtils]: 39: Hoare triple {36702#true} assume test_~splverifierCounter~0#1 < 4; {36702#true} is VALID [2022-02-20 18:13:31,853 INFO L290 TraceCheckUtils]: 40: Hoare triple {36702#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {36702#true} is VALID [2022-02-20 18:13:31,853 INFO L290 TraceCheckUtils]: 41: Hoare triple {36702#true} assume 0 != test_~tmp~4#1; {36702#true} is VALID [2022-02-20 18:13:31,853 INFO L272 TraceCheckUtils]: 42: Hoare triple {36702#true} call waterRise(); {36702#true} is VALID [2022-02-20 18:13:31,853 INFO L290 TraceCheckUtils]: 43: Hoare triple {36702#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36702#true} is VALID [2022-02-20 18:13:31,854 INFO L290 TraceCheckUtils]: 44: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,854 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {36702#true} {36702#true} #382#return; {36702#true} is VALID [2022-02-20 18:13:31,854 INFO L290 TraceCheckUtils]: 46: Hoare triple {36702#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {36702#true} is VALID [2022-02-20 18:13:31,854 INFO L290 TraceCheckUtils]: 47: Hoare triple {36702#true} assume !(0 != test_~tmp___0~0#1); {36702#true} is VALID [2022-02-20 18:13:31,854 INFO L290 TraceCheckUtils]: 48: Hoare triple {36702#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {36702#true} is VALID [2022-02-20 18:13:31,854 INFO L290 TraceCheckUtils]: 49: Hoare triple {36702#true} assume 0 != test_~tmp___2~0#1; {36702#true} is VALID [2022-02-20 18:13:31,855 INFO L290 TraceCheckUtils]: 50: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {36702#true} is VALID [2022-02-20 18:13:31,855 INFO L272 TraceCheckUtils]: 51: Hoare triple {36702#true} call timeShift(); {36702#true} is VALID [2022-02-20 18:13:31,855 INFO L290 TraceCheckUtils]: 52: Hoare triple {36702#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:31,855 INFO L272 TraceCheckUtils]: 53: Hoare triple {36702#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:31,855 INFO L290 TraceCheckUtils]: 54: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:31,856 INFO L290 TraceCheckUtils]: 55: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:31,856 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {36702#true} {36702#true} #352#return; {36702#true} is VALID [2022-02-20 18:13:31,856 INFO L290 TraceCheckUtils]: 57: Hoare triple {36702#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:31,856 INFO L290 TraceCheckUtils]: 58: Hoare triple {36702#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {36702#true} is VALID [2022-02-20 18:13:31,856 INFO L290 TraceCheckUtils]: 59: Hoare triple {36702#true} assume !(0 != ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:31,856 INFO L290 TraceCheckUtils]: 60: Hoare triple {36702#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {36702#true} is VALID [2022-02-20 18:13:31,857 INFO L290 TraceCheckUtils]: 61: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {36702#true} is VALID [2022-02-20 18:13:31,857 INFO L272 TraceCheckUtils]: 62: Hoare triple {36702#true} call processEnvironment__before__methaneAlarm(); {36702#true} is VALID [2022-02-20 18:13:31,857 INFO L290 TraceCheckUtils]: 63: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:31,857 INFO L272 TraceCheckUtils]: 64: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:31,857 INFO L290 TraceCheckUtils]: 65: Hoare triple {36702#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:31,857 INFO L290 TraceCheckUtils]: 66: Hoare triple {36702#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:31,858 INFO L290 TraceCheckUtils]: 67: Hoare triple {36702#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:31,858 INFO L290 TraceCheckUtils]: 68: Hoare triple {36702#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {36702#true} is VALID [2022-02-20 18:13:31,858 INFO L290 TraceCheckUtils]: 69: Hoare triple {36702#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {36702#true} is VALID [2022-02-20 18:13:31,858 INFO L290 TraceCheckUtils]: 70: Hoare triple {36702#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {36702#true} is VALID [2022-02-20 18:13:31,858 INFO L290 TraceCheckUtils]: 71: Hoare triple {36702#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {36702#true} is VALID [2022-02-20 18:13:31,859 INFO L290 TraceCheckUtils]: 72: Hoare triple {36702#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {36702#true} is VALID [2022-02-20 18:13:31,859 INFO L290 TraceCheckUtils]: 73: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {36702#true} is VALID [2022-02-20 18:13:31,859 INFO L272 TraceCheckUtils]: 74: Hoare triple {36702#true} call activatePump__before__methaneQuery(); {36702#true} is VALID [2022-02-20 18:13:31,860 INFO L290 TraceCheckUtils]: 75: Hoare triple {36702#true} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,860 INFO L290 TraceCheckUtils]: 76: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,861 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,861 INFO L290 TraceCheckUtils]: 78: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,861 INFO L290 TraceCheckUtils]: 79: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,862 INFO L290 TraceCheckUtils]: 80: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,862 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #398#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,862 INFO L290 TraceCheckUtils]: 82: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,863 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #362#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,863 INFO L290 TraceCheckUtils]: 84: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,864 INFO L290 TraceCheckUtils]: 85: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,864 INFO L290 TraceCheckUtils]: 86: Hoare triple {36812#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,864 INFO L290 TraceCheckUtils]: 87: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,865 INFO L290 TraceCheckUtils]: 88: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,865 INFO L290 TraceCheckUtils]: 89: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,866 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #388#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,866 INFO L290 TraceCheckUtils]: 91: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !false; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,866 INFO L290 TraceCheckUtils]: 92: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,867 INFO L290 TraceCheckUtils]: 93: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,867 INFO L290 TraceCheckUtils]: 94: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~4#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,868 INFO L290 TraceCheckUtils]: 95: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,868 INFO L290 TraceCheckUtils]: 96: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,868 INFO L290 TraceCheckUtils]: 97: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,869 INFO L290 TraceCheckUtils]: 98: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,869 INFO L290 TraceCheckUtils]: 99: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,869 INFO L272 TraceCheckUtils]: 100: Hoare triple {36812#(<= 1 ~pumpRunning~0)} call timeShift(); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,870 INFO L290 TraceCheckUtils]: 101: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,870 INFO L272 TraceCheckUtils]: 102: Hoare triple {36812#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:31,871 INFO L290 TraceCheckUtils]: 103: Hoare triple {36812#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {37157#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:13:31,871 INFO L290 TraceCheckUtils]: 104: Hoare triple {37157#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {37157#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:13:31,872 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {37157#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {36812#(<= 1 ~pumpRunning~0)} #352#return; {37164#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1|)} is VALID [2022-02-20 18:13:31,872 INFO L290 TraceCheckUtils]: 106: Hoare triple {37164#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,873 INFO L290 TraceCheckUtils]: 107: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,873 INFO L290 TraceCheckUtils]: 108: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,874 INFO L290 TraceCheckUtils]: 109: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,874 INFO L290 TraceCheckUtils]: 110: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,874 INFO L290 TraceCheckUtils]: 111: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,875 INFO L290 TraceCheckUtils]: 112: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,875 INFO L272 TraceCheckUtils]: 113: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__before__methaneAlarm(); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,875 INFO L290 TraceCheckUtils]: 114: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,876 INFO L272 TraceCheckUtils]: 115: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__before__lowWaterSensor(); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,876 INFO L290 TraceCheckUtils]: 116: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,877 INFO L290 TraceCheckUtils]: 117: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,877 INFO L272 TraceCheckUtils]: 118: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__before__highWaterSensor(); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,877 INFO L290 TraceCheckUtils]: 119: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,878 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {37168#(<= 1 ~switchedOnBeforeTS~0)} {37168#(<= 1 ~switchedOnBeforeTS~0)} #348#return; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,878 INFO L290 TraceCheckUtils]: 121: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,879 INFO L290 TraceCheckUtils]: 122: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,879 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {37168#(<= 1 ~switchedOnBeforeTS~0)} {37168#(<= 1 ~switchedOnBeforeTS~0)} #398#return; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,879 INFO L290 TraceCheckUtils]: 124: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,880 INFO L284 TraceCheckUtils]: 125: Hoare quadruple {37168#(<= 1 ~switchedOnBeforeTS~0)} {37168#(<= 1 ~switchedOnBeforeTS~0)} #362#return; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,880 INFO L290 TraceCheckUtils]: 126: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,881 INFO L290 TraceCheckUtils]: 127: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,881 INFO L290 TraceCheckUtils]: 128: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,881 INFO L290 TraceCheckUtils]: 129: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,882 INFO L272 TraceCheckUtils]: 130: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,882 INFO L290 TraceCheckUtils]: 131: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,882 INFO L290 TraceCheckUtils]: 132: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,883 INFO L284 TraceCheckUtils]: 133: Hoare quadruple {37168#(<= 1 ~switchedOnBeforeTS~0)} {37168#(<= 1 ~switchedOnBeforeTS~0)} #364#return; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,883 INFO L290 TraceCheckUtils]: 134: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,884 INFO L290 TraceCheckUtils]: 135: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:31,884 INFO L290 TraceCheckUtils]: 136: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {36703#false} is VALID [2022-02-20 18:13:31,884 INFO L290 TraceCheckUtils]: 137: Hoare triple {36703#false} assume !false; {36703#false} is VALID [2022-02-20 18:13:31,885 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 28 proven. 12 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:13:31,885 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:13:32,635 INFO L290 TraceCheckUtils]: 137: Hoare triple {36703#false} assume !false; {36703#false} is VALID [2022-02-20 18:13:32,636 INFO L290 TraceCheckUtils]: 136: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {36703#false} is VALID [2022-02-20 18:13:32,636 INFO L290 TraceCheckUtils]: 135: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,637 INFO L290 TraceCheckUtils]: 134: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret61#1 && __utac_acc__Specification5_spec__3_#t~ret61#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3#1 := __utac_acc__Specification5_spec__3_#t~ret61#1;havoc __utac_acc__Specification5_spec__3_#t~ret61#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,637 INFO L284 TraceCheckUtils]: 133: Hoare quadruple {36702#true} {37168#(<= 1 ~switchedOnBeforeTS~0)} #364#return; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,637 INFO L290 TraceCheckUtils]: 132: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,637 INFO L290 TraceCheckUtils]: 131: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:32,638 INFO L272 TraceCheckUtils]: 130: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret61#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:32,638 INFO L290 TraceCheckUtils]: 129: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~11#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,638 INFO L290 TraceCheckUtils]: 128: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,639 INFO L290 TraceCheckUtils]: 127: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,639 INFO L290 TraceCheckUtils]: 126: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,640 INFO L284 TraceCheckUtils]: 125: Hoare quadruple {36702#true} {37168#(<= 1 ~switchedOnBeforeTS~0)} #362#return; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,640 INFO L290 TraceCheckUtils]: 124: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {36702#true} {36702#true} #398#return; {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L290 TraceCheckUtils]: 122: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L290 TraceCheckUtils]: 121: Hoare triple {36702#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {36702#true} {36702#true} #348#return; {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L290 TraceCheckUtils]: 119: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L272 TraceCheckUtils]: 118: Hoare triple {36702#true} call processEnvironment__before__highWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:32,640 INFO L290 TraceCheckUtils]: 117: Hoare triple {36702#true} assume !(0 == ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:32,641 INFO L290 TraceCheckUtils]: 116: Hoare triple {36702#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:32,641 INFO L272 TraceCheckUtils]: 115: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:32,641 INFO L290 TraceCheckUtils]: 114: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:32,641 INFO L272 TraceCheckUtils]: 113: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__before__methaneAlarm(); {36702#true} is VALID [2022-02-20 18:13:32,641 INFO L290 TraceCheckUtils]: 112: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,642 INFO L290 TraceCheckUtils]: 111: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,642 INFO L290 TraceCheckUtils]: 110: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,643 INFO L290 TraceCheckUtils]: 109: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,643 INFO L290 TraceCheckUtils]: 108: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,643 INFO L290 TraceCheckUtils]: 107: Hoare triple {37168#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,644 INFO L290 TraceCheckUtils]: 106: Hoare triple {37164#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {37168#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:13:32,645 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {37361#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {36812#(<= 1 ~pumpRunning~0)} #352#return; {37164#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1|)} is VALID [2022-02-20 18:13:32,645 INFO L290 TraceCheckUtils]: 104: Hoare triple {37361#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {37361#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:13:32,646 INFO L290 TraceCheckUtils]: 103: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {37361#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:13:32,646 INFO L272 TraceCheckUtils]: 102: Hoare triple {36812#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:32,646 INFO L290 TraceCheckUtils]: 101: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,647 INFO L272 TraceCheckUtils]: 100: Hoare triple {36812#(<= 1 ~pumpRunning~0)} call timeShift(); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,647 INFO L290 TraceCheckUtils]: 99: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,648 INFO L290 TraceCheckUtils]: 98: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,648 INFO L290 TraceCheckUtils]: 97: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,648 INFO L290 TraceCheckUtils]: 96: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,649 INFO L290 TraceCheckUtils]: 95: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,650 INFO L290 TraceCheckUtils]: 94: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~4#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,650 INFO L290 TraceCheckUtils]: 93: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,650 INFO L290 TraceCheckUtils]: 92: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,651 INFO L290 TraceCheckUtils]: 91: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !false; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,651 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #388#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,651 INFO L290 TraceCheckUtils]: 89: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,652 INFO L290 TraceCheckUtils]: 88: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,652 INFO L290 TraceCheckUtils]: 87: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~11#1); {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,652 INFO L290 TraceCheckUtils]: 86: Hoare triple {36812#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret60#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret60#1 && __utac_acc__Specification5_spec__3_#t~ret60#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~11#1 := __utac_acc__Specification5_spec__3_#t~ret60#1;havoc __utac_acc__Specification5_spec__3_#t~ret60#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,652 INFO L290 TraceCheckUtils]: 85: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret60#1, __utac_acc__Specification5_spec__3_#t~ret61#1, __utac_acc__Specification5_spec__3_~tmp~11#1, __utac_acc__Specification5_spec__3_~tmp___0~3#1;havoc __utac_acc__Specification5_spec__3_~tmp~11#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,653 INFO L290 TraceCheckUtils]: 84: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,653 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #362#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,653 INFO L290 TraceCheckUtils]: 82: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,654 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #398#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,654 INFO L290 TraceCheckUtils]: 80: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,654 INFO L290 TraceCheckUtils]: 79: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,655 INFO L290 TraceCheckUtils]: 78: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,655 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {36812#(<= 1 ~pumpRunning~0)} {36702#true} #344#return; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,655 INFO L290 TraceCheckUtils]: 76: Hoare triple {36812#(<= 1 ~pumpRunning~0)} assume true; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,656 INFO L290 TraceCheckUtils]: 75: Hoare triple {36702#true} ~pumpRunning~0 := 1; {36812#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:13:32,656 INFO L272 TraceCheckUtils]: 74: Hoare triple {36702#true} call activatePump__before__methaneQuery(); {36702#true} is VALID [2022-02-20 18:13:32,656 INFO L290 TraceCheckUtils]: 73: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {36702#true} is VALID [2022-02-20 18:13:32,656 INFO L290 TraceCheckUtils]: 72: Hoare triple {36702#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~5#1;assume { :begin_inline_activatePump } true; {36702#true} is VALID [2022-02-20 18:13:32,657 INFO L290 TraceCheckUtils]: 71: Hoare triple {36702#true} processEnvironment__role__highWaterSensor_#t~ret44#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret44#1 && processEnvironment__role__highWaterSensor_#t~ret44#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~5#1 := processEnvironment__role__highWaterSensor_#t~ret44#1;havoc processEnvironment__role__highWaterSensor_#t~ret44#1; {36702#true} is VALID [2022-02-20 18:13:32,657 INFO L290 TraceCheckUtils]: 70: Hoare triple {36702#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {36702#true} is VALID [2022-02-20 18:13:32,657 INFO L290 TraceCheckUtils]: 69: Hoare triple {36702#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~1#1 := 1; {36702#true} is VALID [2022-02-20 18:13:32,657 INFO L290 TraceCheckUtils]: 68: Hoare triple {36702#true} isHighWaterLevel_#t~ret57#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret57#1 && isHighWaterLevel_#t~ret57#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret57#1;havoc isHighWaterLevel_#t~ret57#1; {36702#true} is VALID [2022-02-20 18:13:32,657 INFO L290 TraceCheckUtils]: 67: Hoare triple {36702#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:32,657 INFO L290 TraceCheckUtils]: 66: Hoare triple {36702#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret57#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36702#true} is VALID [2022-02-20 18:13:32,658 INFO L290 TraceCheckUtils]: 65: Hoare triple {36702#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret44#1, processEnvironment__role__highWaterSensor_~tmp~5#1;havoc processEnvironment__role__highWaterSensor_~tmp~5#1; {36702#true} is VALID [2022-02-20 18:13:32,658 INFO L272 TraceCheckUtils]: 64: Hoare triple {36702#true} call processEnvironment__before__lowWaterSensor(); {36702#true} is VALID [2022-02-20 18:13:32,658 INFO L290 TraceCheckUtils]: 63: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {36702#true} is VALID [2022-02-20 18:13:32,658 INFO L272 TraceCheckUtils]: 62: Hoare triple {36702#true} call processEnvironment__before__methaneAlarm(); {36702#true} is VALID [2022-02-20 18:13:32,658 INFO L290 TraceCheckUtils]: 61: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {36702#true} is VALID [2022-02-20 18:13:32,658 INFO L290 TraceCheckUtils]: 60: Hoare triple {36702#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {36702#true} is VALID [2022-02-20 18:13:32,659 INFO L290 TraceCheckUtils]: 59: Hoare triple {36702#true} assume !(0 != ~pumpRunning~0); {36702#true} is VALID [2022-02-20 18:13:32,659 INFO L290 TraceCheckUtils]: 58: Hoare triple {36702#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {36702#true} is VALID [2022-02-20 18:13:32,659 INFO L290 TraceCheckUtils]: 57: Hoare triple {36702#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret59#1 && __utac_acc__Specification5_spec__2_#t~ret59#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret59#1;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:32,659 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {36702#true} {36702#true} #352#return; {36702#true} is VALID [2022-02-20 18:13:32,660 INFO L290 TraceCheckUtils]: 55: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,660 INFO L290 TraceCheckUtils]: 54: Hoare triple {36702#true} havoc ~retValue_acc~11;~retValue_acc~11 := ~pumpRunning~0;#res := ~retValue_acc~11; {36702#true} is VALID [2022-02-20 18:13:32,660 INFO L272 TraceCheckUtils]: 53: Hoare triple {36702#true} call __utac_acc__Specification5_spec__2_#t~ret59#1 := isPumpRunning(); {36702#true} is VALID [2022-02-20 18:13:32,660 INFO L290 TraceCheckUtils]: 52: Hoare triple {36702#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret59#1; {36702#true} is VALID [2022-02-20 18:13:32,660 INFO L272 TraceCheckUtils]: 51: Hoare triple {36702#true} call timeShift(); {36702#true} is VALID [2022-02-20 18:13:32,660 INFO L290 TraceCheckUtils]: 50: Hoare triple {36702#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {36702#true} is VALID [2022-02-20 18:13:32,661 INFO L290 TraceCheckUtils]: 49: Hoare triple {36702#true} assume 0 != test_~tmp___2~0#1; {36702#true} is VALID [2022-02-20 18:13:32,661 INFO L290 TraceCheckUtils]: 48: Hoare triple {36702#true} assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {36702#true} is VALID [2022-02-20 18:13:32,661 INFO L290 TraceCheckUtils]: 47: Hoare triple {36702#true} assume !(0 != test_~tmp___0~0#1); {36702#true} is VALID [2022-02-20 18:13:32,661 INFO L290 TraceCheckUtils]: 46: Hoare triple {36702#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {36702#true} is VALID [2022-02-20 18:13:32,661 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {36702#true} {36702#true} #382#return; {36702#true} is VALID [2022-02-20 18:13:32,661 INFO L290 TraceCheckUtils]: 44: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,662 INFO L290 TraceCheckUtils]: 43: Hoare triple {36702#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36702#true} is VALID [2022-02-20 18:13:32,662 INFO L272 TraceCheckUtils]: 42: Hoare triple {36702#true} call waterRise(); {36702#true} is VALID [2022-02-20 18:13:32,662 INFO L290 TraceCheckUtils]: 41: Hoare triple {36702#true} assume 0 != test_~tmp~4#1; {36702#true} is VALID [2022-02-20 18:13:32,662 INFO L290 TraceCheckUtils]: 40: Hoare triple {36702#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {36702#true} is VALID [2022-02-20 18:13:32,662 INFO L290 TraceCheckUtils]: 39: Hoare triple {36702#true} assume test_~splverifierCounter~0#1 < 4; {36702#true} is VALID [2022-02-20 18:13:32,662 INFO L290 TraceCheckUtils]: 38: Hoare triple {36702#true} assume !false; {36702#true} is VALID [2022-02-20 18:13:32,663 INFO L290 TraceCheckUtils]: 37: Hoare triple {36702#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_#t~nondet43#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {36702#true} is VALID [2022-02-20 18:13:32,663 INFO L290 TraceCheckUtils]: 36: Hoare triple {36702#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {36702#true} is VALID [2022-02-20 18:13:32,663 INFO L290 TraceCheckUtils]: 35: Hoare triple {36702#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {36702#true} is VALID [2022-02-20 18:13:32,663 INFO L290 TraceCheckUtils]: 34: Hoare triple {36702#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {36702#true} is VALID [2022-02-20 18:13:32,663 INFO L290 TraceCheckUtils]: 33: Hoare triple {36702#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {36702#true} is VALID [2022-02-20 18:13:32,663 INFO L290 TraceCheckUtils]: 32: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret16#1 && select_features_#t~ret16#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret16#1;havoc select_features_#t~ret16#1; {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {36702#true} {36702#true} #380#return; {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L290 TraceCheckUtils]: 30: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L290 TraceCheckUtils]: 29: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L272 TraceCheckUtils]: 28: Hoare triple {36702#true} call select_features_#t~ret16#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L290 TraceCheckUtils]: 27: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret15#1 && select_features_#t~ret15#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret15#1;havoc select_features_#t~ret15#1; {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {36702#true} {36702#true} #378#return; {36702#true} is VALID [2022-02-20 18:13:32,664 INFO L290 TraceCheckUtils]: 25: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,665 INFO L290 TraceCheckUtils]: 24: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:32,666 INFO L272 TraceCheckUtils]: 23: Hoare triple {36702#true} call select_features_#t~ret15#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:32,666 INFO L290 TraceCheckUtils]: 22: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret14#1 && select_features_#t~ret14#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret14#1;havoc select_features_#t~ret14#1; {36702#true} is VALID [2022-02-20 18:13:32,666 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {36702#true} {36702#true} #376#return; {36702#true} is VALID [2022-02-20 18:13:32,666 INFO L290 TraceCheckUtils]: 20: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,666 INFO L290 TraceCheckUtils]: 19: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:32,666 INFO L272 TraceCheckUtils]: 18: Hoare triple {36702#true} call select_features_#t~ret14#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:32,667 INFO L290 TraceCheckUtils]: 17: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret13#1 && select_features_#t~ret13#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret13#1;havoc select_features_#t~ret13#1; {36702#true} is VALID [2022-02-20 18:13:32,667 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {36702#true} {36702#true} #374#return; {36702#true} is VALID [2022-02-20 18:13:32,667 INFO L290 TraceCheckUtils]: 15: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,667 INFO L290 TraceCheckUtils]: 14: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:32,667 INFO L272 TraceCheckUtils]: 13: Hoare triple {36702#true} call select_features_#t~ret13#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:32,667 INFO L290 TraceCheckUtils]: 12: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret12#1 && select_features_#t~ret12#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret12#1;havoc select_features_#t~ret12#1; {36702#true} is VALID [2022-02-20 18:13:32,668 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {36702#true} {36702#true} #372#return; {36702#true} is VALID [2022-02-20 18:13:32,669 INFO L290 TraceCheckUtils]: 10: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,670 INFO L290 TraceCheckUtils]: 9: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:32,671 INFO L272 TraceCheckUtils]: 8: Hoare triple {36702#true} call select_features_#t~ret12#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:32,671 INFO L290 TraceCheckUtils]: 7: Hoare triple {36702#true} assume -2147483648 <= select_features_#t~ret11#1 && select_features_#t~ret11#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret11#1;havoc select_features_#t~ret11#1; {36702#true} is VALID [2022-02-20 18:13:32,672 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {36702#true} {36702#true} #370#return; {36702#true} is VALID [2022-02-20 18:13:32,672 INFO L290 TraceCheckUtils]: 5: Hoare triple {36702#true} assume true; {36702#true} is VALID [2022-02-20 18:13:32,676 INFO L290 TraceCheckUtils]: 4: Hoare triple {36702#true} havoc ~retValue_acc~5;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~choice~0 := #t~nondet10;havoc #t~nondet10;~retValue_acc~5 := ~choice~0;#res := ~retValue_acc~5; {36702#true} is VALID [2022-02-20 18:13:32,678 INFO L272 TraceCheckUtils]: 3: Hoare triple {36702#true} call select_features_#t~ret11#1 := select_one(); {36702#true} is VALID [2022-02-20 18:13:32,678 INFO L290 TraceCheckUtils]: 2: Hoare triple {36702#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret11#1, select_features_#t~ret12#1, select_features_#t~ret13#1, select_features_#t~ret14#1, select_features_#t~ret15#1, select_features_#t~ret16#1;~__SELECTED_FEATURE_base~0 := 1; {36702#true} is VALID [2022-02-20 18:13:32,678 INFO L290 TraceCheckUtils]: 1: Hoare triple {36702#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~4#1, main_~tmp~0#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {36702#true} is VALID [2022-02-20 18:13:32,678 INFO L290 TraceCheckUtils]: 0: Hoare triple {36702#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0; {36702#true} is VALID [2022-02-20 18:13:32,679 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 20 proven. 11 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-02-20 18:13:32,680 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2038355714] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:13:32,680 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:13:32,680 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-02-20 18:13:32,680 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1128809685] [2022-02-20 18:13:32,681 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:13:32,682 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) Word has length 138 [2022-02-20 18:13:32,686 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:13:32,687 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-02-20 18:13:32,826 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:32,826 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-02-20 18:13:32,826 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:13:32,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-02-20 18:13:32,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:13:32,827 INFO L87 Difference]: Start difference. First operand 940 states and 1225 transitions. Second operand has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-02-20 18:13:37,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:37,627 INFO L93 Difference]: Finished difference Result 1805 states and 2408 transitions. [2022-02-20 18:13:37,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-02-20 18:13:37,627 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) Word has length 138 [2022-02-20 18:13:37,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:13:37,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-02-20 18:13:37,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 690 transitions. [2022-02-20 18:13:37,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-02-20 18:13:37,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 690 transitions. [2022-02-20 18:13:37,642 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 39 states and 690 transitions. [2022-02-20 18:13:38,177 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 690 edges. 690 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:13:38,178 INFO L225 Difference]: With dead ends: 1805 [2022-02-20 18:13:38,178 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:13:38,182 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 364 GetRequests, 318 SyntacticMatches, 1 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 567 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2022-02-20 18:13:38,183 INFO L933 BasicCegarLoop]: 311 mSDtfsCounter, 661 mSDsluCounter, 1095 mSDsCounter, 0 mSdLazyCounter, 1394 mSolverCounterSat, 374 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 667 SdHoareTripleChecker+Valid, 1406 SdHoareTripleChecker+Invalid, 1768 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 374 IncrementalHoareTripleChecker+Valid, 1394 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-02-20 18:13:38,184 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [667 Valid, 1406 Invalid, 1768 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [374 Valid, 1394 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-02-20 18:13:38,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:13:38,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:13:38,184 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:13:38,184 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:38,185 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:38,185 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:38,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:38,185 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:13:38,185 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:13:38,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:38,186 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:38,186 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:13:38,186 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:13:38,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:13:38,186 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:13:38,186 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:13:38,186 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:38,187 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:13:38,187 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:13:38,187 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:13:38,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:13:38,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:13:38,188 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 138 [2022-02-20 18:13:38,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:13:38,188 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:13:38,188 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-02-20 18:13:38,188 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:13:38,188 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:13:38,191 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:13:38,213 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:13:38,403 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:13:38,405 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:13:50,191 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 985 992) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,191 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 985 992) no Hoare annotation was computed. [2022-02-20 18:13:50,191 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 985 992) no Hoare annotation was computed. [2022-02-20 18:13:50,191 INFO L858 garLoopResultBuilder]: For program point activatePump__before__methaneQueryFINAL(lines 943 950) no Hoare annotation was computed. [2022-02-20 18:13:50,192 INFO L854 garLoopResultBuilder]: At program point activatePump__before__methaneQueryENTRY(lines 943 950) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0)) (= 0 ~__SELECTED_FEATURE_highWaterSensor~0) (not (<= ~waterLevel~0 2))) [2022-02-20 18:13:50,192 INFO L858 garLoopResultBuilder]: For program point activatePump__before__methaneQueryEXIT(lines 943 950) no Hoare annotation was computed. [2022-02-20 18:13:50,192 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 1004 1012) no Hoare annotation was computed. [2022-02-20 18:13:50,192 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 1004 1012) the Hoare annotation is: true [2022-02-20 18:13:50,192 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 1004 1012) no Hoare annotation was computed. [2022-02-20 18:13:50,192 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2022-02-20 18:13:50,193 INFO L858 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2022-02-20 18:13:50,193 INFO L854 garLoopResultBuilder]: At program point L1064(lines 1049 1067) the Hoare annotation is: (let ((.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse2 (not .cse3))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse5 .cse6 .cse9 .cse7 .cse2)) (.cse1 (not .cse7)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (and .cse5 .cse6 (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse7 (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)) .cse8 .cse1 .cse3 .cse4) (or .cse0 .cse8 .cse1 (not .cse9) .cse4))))) [2022-02-20 18:13:50,193 INFO L854 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not .cse1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse0 (not (<= 2 ~waterLevel~0)) .cse2 .cse4) (or (not (= ~waterLevel~0 1)) .cse3 .cse0 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse4))))) [2022-02-20 18:13:50,193 INFO L854 garLoopResultBuilder]: At program point L962(line 962) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2022-02-20 18:13:50,194 INFO L854 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,194 INFO L854 garLoopResultBuilder]: At program point L962-1(lines 951 967) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (not .cse1))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse7 .cse8)) (.cse0 (not .cse7)) (.cse6 (and (<= 1 ~pumpRunning~0) .cse5 .cse7 .cse8)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse6 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse6 .cse2))))) [2022-02-20 18:13:50,194 INFO L854 garLoopResultBuilder]: At program point L834-1(lines 815 839) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not .cse1))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse0 (not .cse4) .cse2 .cse5) (or .cse3 (= ~pumpRunning~0 0) (and (<= 1 ~pumpRunning~0) .cse4) .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse5))))) [2022-02-20 18:13:50,194 INFO L854 garLoopResultBuilder]: At program point processEnvironment__before__lowWaterSensorENTRY(lines 840 856) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,194 INFO L858 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2022-02-20 18:13:50,195 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorFINAL(lines 840 856) no Hoare annotation was computed. [2022-02-20 18:13:50,195 INFO L858 garLoopResultBuilder]: For program point L149(lines 149 155) no Hoare annotation was computed. [2022-02-20 18:13:50,195 INFO L854 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2022-02-20 18:13:50,195 INFO L854 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse4 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse1))) [2022-02-20 18:13:50,195 INFO L854 garLoopResultBuilder]: At program point L979-1(lines 968 984) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (not .cse1))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse7 .cse8)) (.cse0 (not .cse7)) (.cse6 (and (<= 1 ~pumpRunning~0) .cse5 .cse7 .cse8)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse6 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse6 .cse2))))) [2022-02-20 18:13:50,195 INFO L858 garLoopResultBuilder]: For program point L1058(lines 1058 1062) no Hoare annotation was computed. [2022-02-20 18:13:50,195 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorEXIT(lines 840 856) no Hoare annotation was computed. [2022-02-20 18:13:50,195 INFO L858 garLoopResultBuilder]: For program point L1058-2(lines 1058 1062) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L854 garLoopResultBuilder]: At program point L154(lines 145 158) the Hoare annotation is: (let ((.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse3)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse8)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7 .cse8 .cse2 (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse4 .cse5 (and .cse6 (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1))) (or .cse0 .cse1 (not .cse7) .cse4 .cse5))))) [2022-02-20 18:13:50,196 INFO L858 garLoopResultBuilder]: For program point L823(lines 823 831) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L858 garLoopResultBuilder]: For program point L819(lines 819 836) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 982) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L861 garLoopResultBuilder]: At program point select_oneENTRY(lines 274 283) the Hoare annotation is: true [2022-02-20 18:13:50,196 INFO L858 garLoopResultBuilder]: For program point select_oneFINAL(lines 274 283) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L858 garLoopResultBuilder]: For program point select_oneEXIT(lines 274 283) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L858 garLoopResultBuilder]: For program point L96-1(lines 92 103) no Hoare annotation was computed. [2022-02-20 18:13:50,196 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 92 103) the Hoare annotation is: true [2022-02-20 18:13:50,197 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 92 103) no Hoare annotation was computed. [2022-02-20 18:13:50,197 INFO L858 garLoopResultBuilder]: For program point L1142(lines 1142 1152) no Hoare annotation was computed. [2022-02-20 18:13:50,197 INFO L858 garLoopResultBuilder]: For program point L787(lines 787 793) no Hoare annotation was computed. [2022-02-20 18:13:50,197 INFO L854 garLoopResultBuilder]: At program point L915(line 915) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-02-20 18:13:50,197 INFO L858 garLoopResultBuilder]: For program point L1138(lines 1138 1155) no Hoare annotation was computed. [2022-02-20 18:13:50,197 INFO L858 garLoopResultBuilder]: For program point L787-2(lines 783 805) no Hoare annotation was computed. [2022-02-20 18:13:50,198 INFO L854 garLoopResultBuilder]: At program point L1138-1(lines 1130 1158) the Hoare annotation is: (let ((.cse6 (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse2 (= 1 ~systemActive~0)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse10 (<= 2 |timeShift_getWaterLevel_#res#1|))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse12 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 (<= 2 ~waterLevel~0) .cse2 .cse8 .cse9 (not .cse14) .cse10)) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (not .cse2)) (.cse16 (not (<= 1 |old(~pumpRunning~0)|))) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~waterLevel~0 1)) (.cse18 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or .cse0 (and .cse6 .cse1 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse13) (or (and .cse1 .cse2 .cse9) .cse0 .cse5 .cse14 .cse15 .cse11) (or .cse0 (and .cse1 .cse9) .cse14 .cse11 .cse12) (or .cse0 .cse4 (and .cse1 .cse3) .cse12) (or .cse0 .cse5 .cse15 .cse11 (and .cse6 .cse1 .cse7 .cse2 .cse8 .cse9 .cse10) .cse13) (let ((.cse17 (<= ~waterLevel~0 2))) (or .cse5 .cse16 .cse14 (and .cse1 .cse2 .cse17 .cse18) .cse11 (and .cse19 .cse17 .cse18) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or (and .cse1 .cse2 .cse3 .cse18) .cse5 .cse16 .cse14 (and .cse19 .cse3 .cse18) .cse11 .cse13)))) [2022-02-20 18:13:50,198 INFO L854 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-02-20 18:13:50,198 INFO L854 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-02-20 18:13:50,198 INFO L858 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2022-02-20 18:13:50,199 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 780 806) no Hoare annotation was computed. [2022-02-20 18:13:50,199 INFO L854 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse2 .cse8 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse2 (and .cse9 (= ~waterLevel~0 1))) (or .cse0 .cse4 .cse5 .cse7) (or .cse2 .cse8 .cse3 .cse4 .cse7)))) [2022-02-20 18:13:50,199 INFO L854 garLoopResultBuilder]: At program point L920-1(lines 901 925) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (and .cse11 .cse16)) (.cse5 (not .cse15)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse15 .cse14 .cse16 (not .cse1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 (and .cse7 .cse8 .cse9) .cse2 .cse10 (and .cse11 .cse8 .cse9)) (or .cse0 .cse4 .cse5 (and .cse11 .cse8)) (or .cse0 .cse12 .cse5 .cse2 .cse13 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse5 .cse6 .cse1 (and .cse11 .cse14 .cse9) .cse2 (and .cse7 .cse14 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse12 .cse5 .cse1 .cse2 .cse13)))) [2022-02-20 18:13:50,199 INFO L858 garLoopResultBuilder]: For program point L1143(lines 1143 1149) no Hoare annotation was computed. [2022-02-20 18:13:50,199 INFO L854 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse9 (= ~waterLevel~0 1)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse0 .cse6 .cse2 (and .cse8 .cse9)) (or .cse0 .cse4 .cse5 .cse7) (or .cse2 .cse10 .cse3 (and .cse11 .cse9 .cse12) .cse4 .cse7) (or .cse2 .cse10 .cse3 .cse4 (and .cse11 (<= ~waterLevel~0 2) .cse12) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:50,200 INFO L854 garLoopResultBuilder]: At program point L937-1(lines 926 942) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (and .cse11 .cse16)) (.cse5 (not .cse15)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse15 .cse14 .cse16 (not .cse1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 (and .cse7 .cse8 .cse9) .cse2 .cse10 (and .cse11 .cse8 .cse9)) (or .cse0 .cse4 .cse5 (and .cse11 .cse8)) (or .cse0 .cse12 .cse5 .cse2 .cse13 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse5 .cse6 .cse1 (and .cse11 .cse14 .cse9) .cse2 (and .cse7 .cse14 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse12 .cse5 .cse1 .cse2 .cse13)))) [2022-02-20 18:13:50,200 INFO L854 garLoopResultBuilder]: At program point L1127(lines 1120 1129) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (and .cse12 .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse12 (= ~waterLevel~0 1))) (.cse8 (not (= 0 ~systemActive~0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse3 .cse4) (or .cse6 .cse7 .cse1 .cse4 .cse5) (or .cse6 .cse7 .cse4 .cse8 .cse5) (or .cse6 .cse9 .cse1 .cse10) (or .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse6 .cse9 .cse10 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:50,200 INFO L858 garLoopResultBuilder]: For program point L322(line 322) no Hoare annotation was computed. [2022-02-20 18:13:50,200 INFO L854 garLoopResultBuilder]: At program point L1140(line 1140) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse12 (and .cse10 .cse7)) (.cse13 (not (= 0 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse3 (and .cse6 .cse7 .cse8) .cse4 .cse9 (and .cse10 .cse7 .cse8)) (or .cse0 .cse11 .cse2 .cse12) (or .cse0 .cse4 .cse13 .cse9) (or .cse0 .cse1 .cse3 .cse4 .cse13) (or .cse0 .cse11 .cse12 .cse13) (let ((.cse14 (<= ~waterLevel~0 2))) (or .cse2 .cse5 .cse3 (and .cse10 .cse14 .cse8) .cse4 (and .cse6 .cse14 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse0 .cse2 .cse4 .cse9)))) [2022-02-20 18:13:50,200 INFO L858 garLoopResultBuilder]: For program point L1140-1(line 1140) no Hoare annotation was computed. [2022-02-20 18:13:50,200 INFO L858 garLoopResultBuilder]: For program point L909(lines 909 917) no Hoare annotation was computed. [2022-02-20 18:13:50,200 INFO L854 garLoopResultBuilder]: At program point L141(lines 136 144) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse7 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse18 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse20 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= ~pumpRunning~0 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse13 .cse19)) (.cse0 (and .cse13 .cse18 .cse19 .cse20)) (.cse8 (and (<= 1 ~pumpRunning~0) .cse18 (<= 2 ~waterLevel~0) .cse17 .cse16 .cse19 (not .cse7) .cse20)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse15 (and .cse13 .cse11)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (not .cse17)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse6 .cse7 .cse2 .cse8) (or .cse6 .cse9 .cse7 (and .cse10 .cse11 .cse12) .cse2 .cse4 (and .cse13 .cse11 .cse12)) (or .cse1 .cse14 .cse6 .cse15) (or .cse1 .cse5 .cse7 .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse2 .cse8 .cse4) (or .cse1 .cse14 .cse15 .cse3) (or .cse6 .cse9 .cse7 (and .cse13 .cse16 .cse12) .cse2 (and .cse10 .cse16 .cse12) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:13:50,200 INFO L858 garLoopResultBuilder]: For program point L905(lines 905 922) no Hoare annotation was computed. [2022-02-20 18:13:50,201 INFO L854 garLoopResultBuilder]: At program point L323(lines 318 325) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse3 .cse7) (or .cse5 .cse6 .cse1 .cse2 .cse7) (or .cse0 .cse5 .cse1 .cse2) (or .cse0 .cse4 .cse5) (or .cse0 .cse5 .cse2 .cse7))) [2022-02-20 18:13:50,201 INFO L858 garLoopResultBuilder]: For program point L930(lines 930 940) no Hoare annotation was computed. [2022-02-20 18:13:50,201 INFO L858 garLoopResultBuilder]: For program point L794-1(lines 794 800) no Hoare annotation was computed. [2022-02-20 18:13:50,201 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 780 806) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse5 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (and .cse11 .cse12 .cse13)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse7 .cse8 .cse2 .cse3 .cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse7 .cse8 .cse2 .cse3 .cse9 .cse10) (or .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse10)))) [2022-02-20 18:13:50,201 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 780 806) no Hoare annotation was computed. [2022-02-20 18:13:50,201 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 322) no Hoare annotation was computed. [2022-02-20 18:13:50,201 INFO L858 garLoopResultBuilder]: For program point L72(lines 72 76) no Hoare annotation was computed. [2022-02-20 18:13:50,201 INFO L854 garLoopResultBuilder]: At program point L72-2(lines 68 79) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-02-20 18:13:50,201 INFO L854 garLoopResultBuilder]: At program point L1125(line 1125) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse5 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (and .cse11 .cse12 .cse13)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse7 .cse8 .cse2 .cse3 .cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse7 .cse8 .cse2 .cse3 .cse9 .cse10) (or .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse10)))) [2022-02-20 18:13:50,201 INFO L858 garLoopResultBuilder]: For program point L1125-1(line 1125) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L858 garLoopResultBuilder]: For program point L192(line 192) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 171 200) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 171 200) the Hoare annotation is: true [2022-02-20 18:13:50,202 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 189) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L861 garLoopResultBuilder]: At program point L185-1(lines 185 189) the Hoare annotation is: true [2022-02-20 18:13:50,202 INFO L858 garLoopResultBuilder]: For program point L182(line 182) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L861 garLoopResultBuilder]: At program point L181-2(lines 181 195) the Hoare annotation is: true [2022-02-20 18:13:50,202 INFO L861 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: true [2022-02-20 18:13:50,202 INFO L858 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L861 garLoopResultBuilder]: At program point L196(lines 171 200) the Hoare annotation is: true [2022-02-20 18:13:50,202 INFO L861 garLoopResultBuilder]: At program point processEnvironment__before__highWaterSensorFINAL(lines 807 813) the Hoare annotation is: true [2022-02-20 18:13:50,202 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__highWaterSensorEXIT(lines 807 813) no Hoare annotation was computed. [2022-02-20 18:13:50,202 INFO L854 garLoopResultBuilder]: At program point L1117(lines 1112 1119) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,202 INFO L854 garLoopResultBuilder]: At program point L1093(line 1093) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2022-02-20 18:13:50,203 INFO L854 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,203 INFO L858 garLoopResultBuilder]: For program point L292-1(line 292) no Hoare annotation was computed. [2022-02-20 18:13:50,203 INFO L858 garLoopResultBuilder]: For program point L259(lines 259 266) no Hoare annotation was computed. [2022-02-20 18:13:50,203 INFO L858 garLoopResultBuilder]: For program point L259-2(lines 259 266) no Hoare annotation was computed. [2022-02-20 18:13:50,203 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:13:50,203 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:13:50,203 INFO L854 garLoopResultBuilder]: At program point L763(lines 704 764) the Hoare annotation is: false [2022-02-20 18:13:50,204 INFO L861 garLoopResultBuilder]: At program point L243(lines 235 245) the Hoare annotation is: true [2022-02-20 18:13:50,204 INFO L861 garLoopResultBuilder]: At program point L268(lines 249 271) the Hoare annotation is: true [2022-02-20 18:13:50,204 INFO L858 garLoopResultBuilder]: For program point L747(lines 747 757) no Hoare annotation was computed. [2022-02-20 18:13:50,204 INFO L854 garLoopResultBuilder]: At program point L747-1(lines 735 758) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-02-20 18:13:50,204 INFO L854 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,204 INFO L858 garLoopResultBuilder]: For program point L293-1(line 293) no Hoare annotation was computed. [2022-02-20 18:13:50,204 INFO L858 garLoopResultBuilder]: For program point L706(lines 705 762) no Hoare annotation was computed. [2022-02-20 18:13:50,205 INFO L858 garLoopResultBuilder]: For program point L748(lines 748 754) no Hoare annotation was computed. [2022-02-20 18:13:50,205 INFO L858 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2022-02-20 18:13:50,205 INFO L858 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2022-02-20 18:13:50,205 INFO L854 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,205 INFO L858 garLoopResultBuilder]: For program point L294-1(line 294) no Hoare annotation was computed. [2022-02-20 18:13:50,205 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2022-02-20 18:13:50,205 INFO L854 garLoopResultBuilder]: At program point L295(line 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,206 INFO L858 garLoopResultBuilder]: For program point L295-1(line 295) no Hoare annotation was computed. [2022-02-20 18:13:50,206 INFO L861 garLoopResultBuilder]: At program point L766(lines 695 770) the Hoare annotation is: true [2022-02-20 18:13:50,206 INFO L858 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2022-02-20 18:13:50,206 INFO L858 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2022-02-20 18:13:50,206 INFO L854 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-02-20 18:13:50,206 INFO L854 garLoopResultBuilder]: At program point L230(lines 226 232) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,206 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:13:50,207 INFO L854 garLoopResultBuilder]: At program point L313(lines 308 316) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,207 INFO L854 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,207 INFO L854 garLoopResultBuilder]: At program point L297(lines 284 299) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,207 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:13:50,207 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 758) no Hoare annotation was computed. [2022-02-20 18:13:50,207 INFO L854 garLoopResultBuilder]: At program point L760(lines 705 762) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-02-20 18:13:50,208 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-02-20 18:13:50,208 INFO L854 garLoopResultBuilder]: At program point L1107(lines 1102 1109) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse6 .cse5 .cse1 .cse2 .cse3 .cse4))) [2022-02-20 18:13:50,208 INFO L854 garLoopResultBuilder]: At program point L1099(lines 1087 1101) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 0 ~systemActive~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse1 .cse2 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) .cse3))) [2022-02-20 18:13:50,208 INFO L858 garLoopResultBuilder]: For program point L1091(lines 1091 1097) no Hoare annotation was computed. [2022-02-20 18:13:50,208 INFO L854 garLoopResultBuilder]: At program point L290(line 290) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,208 INFO L858 garLoopResultBuilder]: For program point L1091-1(lines 1091 1097) no Hoare annotation was computed. [2022-02-20 18:13:50,208 INFO L858 garLoopResultBuilder]: For program point L290-1(line 290) no Hoare annotation was computed. [2022-02-20 18:13:50,209 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-02-20 18:13:50,209 INFO L854 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:13:50,209 INFO L858 garLoopResultBuilder]: For program point L291-1(line 291) no Hoare annotation was computed. [2022-02-20 18:13:50,209 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 80 91) no Hoare annotation was computed. [2022-02-20 18:13:50,209 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 80 91) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse4) (or .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse0 .cse7 .cse1 .cse8) (or .cse1 .cse6 .cse9 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse0 .cse7 .cse8 .cse5) (or .cse1 .cse6 .cse9 .cse2 .cse3 .cse4))) [2022-02-20 18:13:50,209 INFO L858 garLoopResultBuilder]: For program point L84-1(lines 80 91) no Hoare annotation was computed. [2022-02-20 18:13:50,210 INFO L854 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,210 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmEXIT(lines 883 899) no Hoare annotation was computed. [2022-02-20 18:13:50,210 INFO L854 garLoopResultBuilder]: At program point L872(line 872) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,210 INFO L854 garLoopResultBuilder]: At program point L164(lines 159 167) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,210 INFO L854 garLoopResultBuilder]: At program point L868(line 868) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,210 INFO L858 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2022-02-20 18:13:50,211 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmFINAL(lines 883 899) no Hoare annotation was computed. [2022-02-20 18:13:50,211 INFO L858 garLoopResultBuilder]: For program point L862(lines 862 879) no Hoare annotation was computed. [2022-02-20 18:13:50,211 INFO L854 garLoopResultBuilder]: At program point L1083(lines 1068 1086) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,211 INFO L854 garLoopResultBuilder]: At program point processEnvironment__before__methaneAlarmENTRY(lines 883 899) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:13:50,211 INFO L858 garLoopResultBuilder]: For program point L1077(lines 1077 1081) no Hoare annotation was computed. [2022-02-20 18:13:50,211 INFO L858 garLoopResultBuilder]: For program point L1077-2(lines 1077 1081) no Hoare annotation was computed. [2022-02-20 18:13:50,212 INFO L854 garLoopResultBuilder]: At program point L877(line 877) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse4 .cse0) (or .cse3 .cse4 .cse0 .cse1 .cse2))) [2022-02-20 18:13:50,212 INFO L854 garLoopResultBuilder]: At program point L877-1(lines 858 882) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not .cse7)) (.cse5 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 (not .cse2))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse1) (or .cse4 .cse0 .cse1 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse1 (not .cse6) .cse5 .cse3)))) [2022-02-20 18:13:50,212 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 993 1003) the Hoare annotation is: true [2022-02-20 18:13:50,212 INFO L861 garLoopResultBuilder]: At program point L109(lines 104 112) the Hoare annotation is: true [2022-02-20 18:13:50,212 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 993 1003) no Hoare annotation was computed. [2022-02-20 18:13:50,212 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 993 1003) no Hoare annotation was computed. [2022-02-20 18:13:50,216 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:13:50,217 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:13:50,220 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:13:50,221 WARN L170 areAnnotationChecker]: activatePump__before__methaneQueryFINAL has no Hoare annotation [2022-02-20 18:13:50,221 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:13:50,221 WARN L170 areAnnotationChecker]: L819 has no Hoare annotation [2022-02-20 18:13:50,223 WARN L170 areAnnotationChecker]: select_oneFINAL has no Hoare annotation [2022-02-20 18:13:50,224 WARN L170 areAnnotationChecker]: L96-1 has no Hoare annotation [2022-02-20 18:13:50,224 WARN L170 areAnnotationChecker]: L96-1 has no Hoare annotation [2022-02-20 18:13:50,226 WARN L170 areAnnotationChecker]: processEnvironment__before__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,226 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:13:50,226 WARN L170 areAnnotationChecker]: L84-1 has no Hoare annotation [2022-02-20 18:13:50,227 WARN L170 areAnnotationChecker]: L84-1 has no Hoare annotation [2022-02-20 18:13:50,227 WARN L170 areAnnotationChecker]: L862 has no Hoare annotation [2022-02-20 18:13:50,228 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:13:50,228 WARN L170 areAnnotationChecker]: activatePump__before__methaneQueryFINAL has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: L819 has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: L819 has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: processEnvironment__before__lowWaterSensorFINAL has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: select_oneFINAL has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: L96-1 has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: L1125-1 has no Hoare annotation [2022-02-20 18:13:50,229 WARN L170 areAnnotationChecker]: L177-1 has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: processEnvironment__before__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: processEnvironment__before__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: processEnvironment__before__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: L84-1 has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: L862 has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: L862 has no Hoare annotation [2022-02-20 18:13:50,231 WARN L170 areAnnotationChecker]: processEnvironment__before__methaneAlarmFINAL has no Hoare annotation [2022-02-20 18:13:50,232 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:13:50,232 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:13:50,232 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: activatePump__before__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: activatePump__before__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: L149 has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: L149 has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: processEnvironment__before__lowWaterSensorFINAL has no Hoare annotation [2022-02-20 18:13:50,233 WARN L170 areAnnotationChecker]: select_oneEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: select_oneEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: select_oneEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: select_oneEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: select_oneEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: select_oneEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: L1125-1 has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: L177-1 has no Hoare annotation [2022-02-20 18:13:50,234 WARN L170 areAnnotationChecker]: processEnvironment__before__lowWaterSensorFINAL has no Hoare annotation [2022-02-20 18:13:50,235 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:13:50,235 WARN L170 areAnnotationChecker]: L1077 has no Hoare annotation [2022-02-20 18:13:50,236 WARN L170 areAnnotationChecker]: processEnvironment__before__methaneAlarmFINAL has no Hoare annotation [2022-02-20 18:13:50,236 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:13:50,246 WARN L170 areAnnotationChecker]: L1091-1 has no Hoare annotation [2022-02-20 18:13:50,247 WARN L170 areAnnotationChecker]: processEnvironment__before__methaneAlarmFINAL has no Hoare annotation [2022-02-20 18:13:50,251 WARN L170 areAnnotationChecker]: L1140-1 has no Hoare annotation [2022-02-20 18:13:50,251 WARN L170 areAnnotationChecker]: L1058 has no Hoare annotation [2022-02-20 18:13:50,251 WARN L170 areAnnotationChecker]: processEnvironment__before__lowWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,251 WARN L170 areAnnotationChecker]: processEnvironment__before__lowWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,251 WARN L170 areAnnotationChecker]: processEnvironment__before__lowWaterSensorEXIT has no Hoare annotation [2022-02-20 18:13:50,251 WARN L170 areAnnotationChecker]: L290-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L291-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L292-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L293-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L294-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L725-1 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L787 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-02-20 18:13:50,252 WARN L170 areAnnotationChecker]: L290-1 has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: L715-1 has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: L1077 has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: L1077 has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: processEnvironment__before__methaneAlarmEXIT has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: processEnvironment__before__methaneAlarmEXIT has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: processEnvironment__before__methaneAlarmEXIT has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:13:50,253 WARN L170 areAnnotationChecker]: L794-1 has no Hoare annotation [2022-02-20 18:13:50,255 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2022-02-20 18:13:50,255 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2022-02-20 18:13:50,255 WARN L170 areAnnotationChecker]: L1058 has no Hoare annotation [2022-02-20 18:13:50,255 WARN L170 areAnnotationChecker]: L1058 has no Hoare annotation [2022-02-20 18:13:50,256 WARN L170 areAnnotationChecker]: L291-1 has no Hoare annotation [2022-02-20 18:13:50,256 WARN L170 areAnnotationChecker]: L292-1 has no Hoare annotation [2022-02-20 18:13:50,256 WARN L170 areAnnotationChecker]: L293-1 has no Hoare annotation [2022-02-20 18:13:50,256 WARN L170 areAnnotationChecker]: L294-1 has no Hoare annotation [2022-02-20 18:13:50,256 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2022-02-20 18:13:50,257 WARN L170 areAnnotationChecker]: L735 has no Hoare annotation [2022-02-20 18:13:50,257 WARN L170 areAnnotationChecker]: L735 has no Hoare annotation [2022-02-20 18:13:50,257 WARN L170 areAnnotationChecker]: L787 has no Hoare annotation [2022-02-20 18:13:50,257 WARN L170 areAnnotationChecker]: L787 has no Hoare annotation [2022-02-20 18:13:50,257 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L725 has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L725 has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L1077-2 has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L956-1 has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2022-02-20 18:13:50,258 WARN L170 areAnnotationChecker]: L794-1 has no Hoare annotation [2022-02-20 18:13:50,259 WARN L170 areAnnotationChecker]: L1143 has no Hoare annotation [2022-02-20 18:13:50,259 WARN L170 areAnnotationChecker]: L1143 has no Hoare annotation [2022-02-20 18:13:50,259 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L1058-2 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L259 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L72 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L72 has no Hoare annotation [2022-02-20 18:13:50,260 WARN L170 areAnnotationChecker]: L787-2 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L787-2 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L725-1 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L958 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L958 has no Hoare annotation [2022-02-20 18:13:50,261 WARN L170 areAnnotationChecker]: L909 has no Hoare annotation [2022-02-20 18:13:50,262 WARN L170 areAnnotationChecker]: L909 has no Hoare annotation [2022-02-20 18:13:50,262 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2022-02-20 18:13:50,264 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-02-20 18:13:50,264 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2022-02-20 18:13:50,264 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2022-02-20 18:13:50,264 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:13:50,264 WARN L170 areAnnotationChecker]: L823 has no Hoare annotation [2022-02-20 18:13:50,265 WARN L170 areAnnotationChecker]: L259 has no Hoare annotation [2022-02-20 18:13:50,265 WARN L170 areAnnotationChecker]: L259 has no Hoare annotation [2022-02-20 18:13:50,267 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2022-02-20 18:13:50,267 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2022-02-20 18:13:50,267 WARN L170 areAnnotationChecker]: L787-2 has no Hoare annotation [2022-02-20 18:13:50,267 WARN L170 areAnnotationChecker]: L930 has no Hoare annotation [2022-02-20 18:13:50,267 WARN L170 areAnnotationChecker]: L930 has no Hoare annotation [2022-02-20 18:13:50,267 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-02-20 18:13:50,268 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2022-02-20 18:13:50,268 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2022-02-20 18:13:50,271 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2022-02-20 18:13:50,271 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2022-02-20 18:13:50,271 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-02-20 18:13:50,271 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-02-20 18:13:50,273 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:13:50,273 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L823 has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L823 has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L259-2 has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L1091 has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L1091 has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2022-02-20 18:13:50,274 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2022-02-20 18:13:50,275 WARN L170 areAnnotationChecker]: L259-2 has no Hoare annotation [2022-02-20 18:13:50,275 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-02-20 18:13:50,276 WARN L170 areAnnotationChecker]: L1140-1 has no Hoare annotation [2022-02-20 18:13:50,276 WARN L170 areAnnotationChecker]: L707 has no Hoare annotation [2022-02-20 18:13:50,277 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:13:50,277 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:13:50,277 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:13:50,277 WARN L170 areAnnotationChecker]: L1091-1 has no Hoare annotation [2022-02-20 18:13:50,278 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2022-02-20 18:13:50,279 WARN L170 areAnnotationChecker]: L715 has no Hoare annotation [2022-02-20 18:13:50,279 WARN L170 areAnnotationChecker]: L715 has no Hoare annotation [2022-02-20 18:13:50,279 WARN L170 areAnnotationChecker]: L956-1 has no Hoare annotation [2022-02-20 18:13:50,279 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:13:50,279 WARN L170 areAnnotationChecker]: L715-1 has no Hoare annotation [2022-02-20 18:13:50,280 INFO L163 areAnnotationChecker]: CFG has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:13:50,338 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:13:50 BoogieIcfgContainer [2022-02-20 18:13:50,338 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:13:50,339 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:13:50,339 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:13:50,339 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:13:50,340 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:13:10" (3/4) ... [2022-02-20 18:13:50,342 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:13:50,347 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure activatePump__before__methaneQuery [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure select_one [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:13:50,348 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__highWaterSensor [2022-02-20 18:13:50,349 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:13:50,349 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__methaneAlarm [2022-02-20 18:13:50,349 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-02-20 18:13:50,358 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-02-20 18:13:50,359 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:13:50,360 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:13:50,360 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:13:50,361 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:13:50,362 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:13:50,362 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:13:50,385 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:13:50,386 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:50,386 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2022-02-20 18:13:50,386 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((((1 < tmp && pumpRunning == 0) && \result <= 2) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || ((((((1 < tmp && pumpRunning == 0) && \result <= 2) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:50,387 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2022-02-20 18:13:50,387 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-02-20 18:13:50,387 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2022-02-20 18:13:50,388 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(0 == __SELECTED_FEATURE_highWaterSensor))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((tmp == 1 && \result == 1) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2022-02-20 18:13:50,388 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:13:50,389 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:13:50,389 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) || (pumpRunning == 0 && \result == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) [2022-02-20 18:13:50,389 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2022-02-20 18:13:50,389 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2022-02-20 18:13:50,389 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:13:50,390 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) [2022-02-20 18:13:50,441 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:13:50,442 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:13:50,443 INFO L158 Benchmark]: Toolchain (without parser) took 41210.82ms. Allocated memory was 94.4MB in the beginning and 237.0MB in the end (delta: 142.6MB). Free memory was 73.5MB in the beginning and 184.7MB in the end (delta: -111.2MB). Peak memory consumption was 29.7MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,444 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 77.6MB. Free memory was 50.0MB in the beginning and 49.9MB in the end (delta: 59.2kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,445 INFO L158 Benchmark]: CACSL2BoogieTranslator took 552.00ms. Allocated memory is still 94.4MB. Free memory was 73.2MB in the beginning and 60.6MB in the end (delta: 12.6MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,445 INFO L158 Benchmark]: Boogie Procedure Inliner took 91.33ms. Allocated memory is still 94.4MB. Free memory was 60.6MB in the beginning and 57.4MB in the end (delta: 3.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,445 INFO L158 Benchmark]: Boogie Preprocessor took 55.51ms. Allocated memory is still 94.4MB. Free memory was 57.4MB in the beginning and 55.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,445 INFO L158 Benchmark]: RCFGBuilder took 673.94ms. Allocated memory is still 94.4MB. Free memory was 55.4MB in the beginning and 29.1MB in the end (delta: 26.3MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,446 INFO L158 Benchmark]: TraceAbstraction took 39715.73ms. Allocated memory was 94.4MB in the beginning and 237.0MB in the end (delta: 142.6MB). Free memory was 71.6MB in the beginning and 193.1MB in the end (delta: -121.5MB). Peak memory consumption was 147.5MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,446 INFO L158 Benchmark]: Witness Printer took 102.88ms. Allocated memory is still 237.0MB. Free memory was 192.0MB in the beginning and 184.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:13:50,447 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 77.6MB. Free memory was 50.0MB in the beginning and 49.9MB in the end (delta: 59.2kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 552.00ms. Allocated memory is still 94.4MB. Free memory was 73.2MB in the beginning and 60.6MB in the end (delta: 12.6MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 91.33ms. Allocated memory is still 94.4MB. Free memory was 60.6MB in the beginning and 57.4MB in the end (delta: 3.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.51ms. Allocated memory is still 94.4MB. Free memory was 57.4MB in the beginning and 55.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 673.94ms. Allocated memory is still 94.4MB. Free memory was 55.4MB in the beginning and 29.1MB in the end (delta: 26.3MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 39715.73ms. Allocated memory was 94.4MB in the beginning and 237.0MB in the end (delta: 142.6MB). Free memory was 71.6MB in the beginning and 193.1MB in the end (delta: -121.5MB). Peak memory consumption was 147.5MB. Max. memory is 16.1GB. * Witness Printer took 102.88ms. Allocated memory is still 237.0MB. Free memory was 192.0MB in the beginning and 184.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 322]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 13 procedures, 148 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 39.5s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 19.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2898 SdHoareTripleChecker+Valid, 4.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2841 mSDsluCounter, 6529 SdHoareTripleChecker+Invalid, 4.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4257 mSDsCounter, 1219 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3477 IncrementalHoareTripleChecker+Invalid, 4696 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1219 mSolverCounterUnsat, 2272 mSDtfsCounter, 3477 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 825 GetRequests, 696 SyntacticMatches, 2 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 904 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1169occurred in iteration=8, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.0s AutomataMinimizationTime, 11 MinimizatonAttempts, 344 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 71 LocationsWithAnnotation, 4651 PreInvPairs, 5165 NumberOfFragments, 5849 HoareAnnotationTreeSize, 4651 FomulaSimplifications, 5811 FormulaSimplificationTreeSizeReduction, 4.1s HoareSimplificationTime, 71 FomulaSimplificationsInter, 21936 FormulaSimplificationTreeSizeReductionInter, 7.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.9s InterpolantComputationTime, 1312 NumberOfCodeBlocks, 1312 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1436 ConstructedInterpolants, 0 QuantifiedInterpolants, 2650 SizeOfPredicates, 3 NumberOfNonLiveVariables, 1219 ConjunctsInSsa, 11 ConjunctsInUnsatCore, 14 InterpolantComputations, 10 PerfectInterpolantSequences, 827/877 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 1120]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1130]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((((1 < tmp && pumpRunning == 0) && \result <= 2) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || ((((((1 < tmp && pumpRunning == 0) && \result <= 2) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 68]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) - InvariantResult [Line: 318]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(0 == __SELECTED_FEATURE_highWaterSensor))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((tmp == 1 && \result == 1) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 1087]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 1068]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 1049]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || ((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 0 == systemActive)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 145]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) || (pumpRunning == 0 && \result == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) - InvariantResult [Line: 1112]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:13:50,509 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE