./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec2_product27.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3a877d22 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec2_product27.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7abfb9176afcd07735578408e79f372120c27df81ffb5983e2784997c7f45a43 --- Real Ultimate output --- This is Ultimate 0.2.2-3a877d227dc491413fd706022d0c47cd97beb353-3a877d2 [2021-12-15 17:13:47,772 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-15 17:13:47,778 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-15 17:13:47,828 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-15 17:13:47,829 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-15 17:13:47,832 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-15 17:13:47,834 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-15 17:13:47,837 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-15 17:13:47,838 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-15 17:13:47,839 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-15 17:13:47,840 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-15 17:13:47,841 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-15 17:13:47,841 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-15 17:13:47,842 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-15 17:13:47,842 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-15 17:13:47,843 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-15 17:13:47,844 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-15 17:13:47,845 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-15 17:13:47,846 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-15 17:13:47,848 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-15 17:13:47,850 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-15 17:13:47,855 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-15 17:13:47,856 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-15 17:13:47,856 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-15 17:13:47,861 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-15 17:13:47,861 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-15 17:13:47,865 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-15 17:13:47,865 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-15 17:13:47,866 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-15 17:13:47,866 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-15 17:13:47,867 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-15 17:13:47,867 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-15 17:13:47,868 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-15 17:13:47,869 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-15 17:13:47,870 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-15 17:13:47,871 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-15 17:13:47,872 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-15 17:13:47,872 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-15 17:13:47,873 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-15 17:13:47,873 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-15 17:13:47,874 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-15 17:13:47,875 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-15 17:13:47,903 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-15 17:13:47,904 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-15 17:13:47,904 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-15 17:13:47,904 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-15 17:13:47,906 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-15 17:13:47,906 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-15 17:13:47,906 INFO L138 SettingsManager]: * Use SBE=true [2021-12-15 17:13:47,906 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-15 17:13:47,906 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-15 17:13:47,907 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-15 17:13:47,907 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-15 17:13:47,908 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-15 17:13:47,908 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-15 17:13:47,908 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-15 17:13:47,908 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-15 17:13:47,908 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-15 17:13:47,909 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-15 17:13:47,909 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-15 17:13:47,909 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-15 17:13:47,909 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-15 17:13:47,909 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-15 17:13:47,910 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-15 17:13:47,910 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-15 17:13:47,910 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-15 17:13:47,911 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-15 17:13:47,912 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-15 17:13:47,912 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-15 17:13:47,912 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-15 17:13:47,912 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-15 17:13:47,912 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-15 17:13:47,913 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-15 17:13:47,913 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-15 17:13:47,914 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-15 17:13:47,914 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7abfb9176afcd07735578408e79f372120c27df81ffb5983e2784997c7f45a43 [2021-12-15 17:13:48,188 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-15 17:13:48,232 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-15 17:13:48,235 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-15 17:13:48,236 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-15 17:13:48,237 INFO L275 PluginConnector]: CDTParser initialized [2021-12-15 17:13:48,238 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec2_product27.cil.c [2021-12-15 17:13:48,295 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/798f37a31/d2c521ff9daf43aa91c6f4ac5bd0bc73/FLAGa338c0de9 [2021-12-15 17:13:48,888 INFO L306 CDTParser]: Found 1 translation units. [2021-12-15 17:13:48,888 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product27.cil.c [2021-12-15 17:13:48,922 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/798f37a31/d2c521ff9daf43aa91c6f4ac5bd0bc73/FLAGa338c0de9 [2021-12-15 17:13:49,116 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/798f37a31/d2c521ff9daf43aa91c6f4ac5bd0bc73 [2021-12-15 17:13:49,119 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-15 17:13:49,121 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-15 17:13:49,124 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-15 17:13:49,124 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-15 17:13:49,126 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-15 17:13:49,127 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:49,128 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@f898e67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49, skipping insertion in model container [2021-12-15 17:13:49,128 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:49,133 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-15 17:13:49,187 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-15 17:13:49,472 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product27.cil.c[16494,16507] [2021-12-15 17:13:49,637 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:13:49,646 INFO L203 MainTranslator]: Completed pre-run [2021-12-15 17:13:49,690 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product27.cil.c[16494,16507] [2021-12-15 17:13:49,752 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:13:49,791 INFO L208 MainTranslator]: Completed translation [2021-12-15 17:13:49,792 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49 WrapperNode [2021-12-15 17:13:49,792 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-15 17:13:49,793 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-15 17:13:49,793 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-15 17:13:49,793 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-15 17:13:49,799 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:49,835 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:49,986 INFO L137 Inliner]: procedures = 95, calls = 342, calls flagged for inlining = 195, calls inlined = 330, statements flattened = 9572 [2021-12-15 17:13:49,987 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-15 17:13:49,988 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-15 17:13:49,988 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-15 17:13:49,988 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-15 17:13:49,995 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:49,995 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,018 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,019 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,090 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,151 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,167 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,194 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-15 17:13:50,195 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-15 17:13:50,196 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-15 17:13:50,196 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-15 17:13:50,200 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (1/1) ... [2021-12-15 17:13:50,208 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-15 17:13:50,216 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-15 17:13:50,228 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-15 17:13:50,235 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-15 17:13:50,290 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-15 17:13:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-15 17:13:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-15 17:13:50,291 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-15 17:13:50,419 INFO L236 CfgBuilder]: Building ICFG [2021-12-15 17:13:50,420 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-15 17:13:54,209 INFO L277 CfgBuilder]: Performing block encoding [2021-12-15 17:13:54,257 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-15 17:13:54,257 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-15 17:13:54,263 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:13:54 BoogieIcfgContainer [2021-12-15 17:13:54,279 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-15 17:13:54,280 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-15 17:13:54,280 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-15 17:13:54,284 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-15 17:13:54,284 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:13:54,284 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.12 05:13:49" (1/3) ... [2021-12-15 17:13:54,286 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@342c5df1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:13:54, skipping insertion in model container [2021-12-15 17:13:54,286 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:13:54,286 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:13:49" (2/3) ... [2021-12-15 17:13:54,287 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@342c5df1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:13:54, skipping insertion in model container [2021-12-15 17:13:54,287 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:13:54,287 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:13:54" (3/3) ... [2021-12-15 17:13:54,288 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product27.cil.c [2021-12-15 17:13:54,368 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-15 17:13:54,369 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-15 17:13:54,369 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-15 17:13:54,369 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-15 17:13:54,369 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-15 17:13:54,369 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-15 17:13:54,369 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-15 17:13:54,370 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-15 17:13:54,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2671 states, 2670 states have (on average 1.8569288389513108) internal successors, (4958), 2670 states have internal predecessors, (4958), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:54,618 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1319 [2021-12-15 17:13:54,624 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:54,624 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:54,653 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:54,664 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:54,664 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-15 17:13:54,670 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2671 states, 2670 states have (on average 1.8569288389513108) internal successors, (4958), 2670 states have internal predecessors, (4958), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:54,737 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1319 [2021-12-15 17:13:54,751 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:13:54,751 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:13:54,755 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:54,755 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:13:54,762 INFO L791 eck$LassoCheckResult]: Stem: 652#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2540#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret132#1, main_~retValue_acc~21#1, main_~tmp~27#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2593#L3434true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1924#L3427true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1534#L3442true main_#t~ret132#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret132#1;havoc main_#t~ret132#1; 2401#L2619true assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2075#L2591true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 946#L435true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret125#1, bigMacCall_~tmp~24#1;havoc bigMacCall_~tmp~24#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 2106#L3337true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 1936#L3362true bigMacCall_#t~ret125#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~24#1 := bigMacCall_#t~ret125#1;havoc bigMacCall_#t~ret125#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~24#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1628#L2986true assume 0 == initPersonOnFloor_~floor#1; 369#L2987true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1856#L3094-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 514#L2778true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2047#L2790-2true assume { :end_inline_callOnFloor } true; 2588#L3130true assume { :end_inline_initPersonOnFloor } true; 2360#L2396true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret126#1, cleanup_#t~ret127#1, cleanup_~i~3#1, cleanup_~tmp~25#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~25#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 921#L2715true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1624#L2742true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 373#L2266true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 581#L1651true assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 840#L982true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 966#L1655true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 2433#L1668true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2481#L1803true assume !(0 != timeShift_~tmp___9~2#1); 1476#L1894true assume !(1 == ~doorState~0); 2054#L1894-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 2211#L2715-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1035#L2742-3true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 647#L2266-1true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 7#L1534true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1253#L982-1true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 298#L1547true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1918#L1902true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 2193#L1591true assume !(1 == ~currentHeading~0); 833#L1601true assume !(0 == ~currentFloorID~0); 1674#L1601-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1807#L1607-1true assume { :end_inline_continueInDirection } true; 1813#L1911-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1309#L982-3true __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 1746#L480true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2523#L481true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2039#L991true __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 1432#L485true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 865#L540true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 771#L1926true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2346#L2423-2true [2021-12-15 17:13:54,764 INFO L793 eck$LassoCheckResult]: Loop: 2346#L2423-2true assume !false; 2576#L2424true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 973#L2427true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 1791#L805true cleanup_#t~ret126#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 1286#L2431true assume 1 != cleanup_~tmp___0~11#1; 1983#L2431-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 1782#L2715-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 676#L2742-25true anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1026#L1090true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 671#L1154true isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 1162#L1167true cleanup_#t~ret127#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~25#1 := cleanup_#t~ret127#1;havoc cleanup_#t~ret127#1; 1972#L2443true assume !(0 != cleanup_~tmp~25#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 1293#L2715-30true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1200#L2742-30true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 2059#L2266-3true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1938#L1651-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2604#L982-4true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1389#L1655-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 116#L1668-1true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2123#L1803-2true assume !(0 != timeShift_~tmp___9~2#1); 434#L1894-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2082#L1894-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 2493#L2715-33true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1415#L2742-33true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 593#L2266-4true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2233#L1534-2true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2562#L982-5true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 2061#L1547-2true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 120#L1902-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 1048#L1591-3true assume !(1 == ~currentHeading~0); 1610#L1601-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1789#L1601-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1216#L1607-7true assume { :end_inline_continueInDirection } true; 391#L1911-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2175#L982-7true __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 2319#L480-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 290#L481-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1443#L991-5true __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 1857#L485-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1001#L540-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1765#L1926-1true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2346#L2423-2true [2021-12-15 17:13:54,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:54,769 INFO L85 PathProgramCache]: Analyzing trace with hash -2064197123, now seen corresponding path program 1 times [2021-12-15 17:13:54,777 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:54,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1417301491] [2021-12-15 17:13:54,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:54,778 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:55,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:55,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:55,306 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:55,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1417301491] [2021-12-15 17:13:55,307 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1417301491] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:55,307 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:55,307 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:13:55,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1292737055] [2021-12-15 17:13:55,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:55,313 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:13:55,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:13:55,314 INFO L85 PathProgramCache]: Analyzing trace with hash 1276081084, now seen corresponding path program 1 times [2021-12-15 17:13:55,314 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:13:55,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726115828] [2021-12-15 17:13:55,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:13:55,315 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:13:55,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:13:55,501 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:13:55,502 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:13:55,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726115828] [2021-12-15 17:13:55,502 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726115828] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:13:55,503 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:13:55,503 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-15 17:13:55,503 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2138591989] [2021-12-15 17:13:55,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:13:55,505 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:13:55,506 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:13:55,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-15 17:13:55,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-15 17:13:55,580 INFO L87 Difference]: Start difference. First operand has 2671 states, 2670 states have (on average 1.8569288389513108) internal successors, (4958), 2670 states have internal predecessors, (4958), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:13:59,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:13:59,868 INFO L93 Difference]: Finished difference Result 20308 states and 37469 transitions. [2021-12-15 17:13:59,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-15 17:13:59,873 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20308 states and 37469 transitions. [2021-12-15 17:14:00,111 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9760 [2021-12-15 17:14:00,271 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20308 states to 20128 states and 37273 transitions. [2021-12-15 17:14:00,274 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20128 [2021-12-15 17:14:00,304 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20128 [2021-12-15 17:14:00,305 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20128 states and 37273 transitions. [2021-12-15 17:14:00,345 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:14:00,345 INFO L681 BuchiCegarLoop]: Abstraction has 20128 states and 37273 transitions. [2021-12-15 17:14:00,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20128 states and 37273 transitions. [2021-12-15 17:14:00,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20128 to 7630. [2021-12-15 17:14:00,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7630 states, 7630 states have (on average 1.8537352555701179) internal successors, (14144), 7629 states have internal predecessors, (14144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:14:00,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7630 states to 7630 states and 14144 transitions. [2021-12-15 17:14:00,599 INFO L704 BuchiCegarLoop]: Abstraction has 7630 states and 14144 transitions. [2021-12-15 17:14:00,599 INFO L587 BuchiCegarLoop]: Abstraction has 7630 states and 14144 transitions. [2021-12-15 17:14:00,600 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-15 17:14:00,600 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7630 states and 14144 transitions. [2021-12-15 17:14:00,621 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3866 [2021-12-15 17:14:00,622 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:14:00,622 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:14:00,625 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:14:00,625 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:14:00,625 INFO L791 eck$LassoCheckResult]: Stem: 24283#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24284#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret132#1, main_~retValue_acc~21#1, main_~tmp~27#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 25789#L3434 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 25537#L3427 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 25283#L3442 main_#t~ret132#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret132#1;havoc main_#t~ret132#1; 25284#L2619 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 25622#L2591 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 24688#L435 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret125#1, bigMacCall_~tmp~24#1;havoc bigMacCall_~tmp~24#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 24689#L3337 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 24440#L3362 bigMacCall_#t~ret125#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~24#1 := bigMacCall_#t~ret125#1;havoc bigMacCall_#t~ret125#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~24#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 25351#L2986 assume 0 == initPersonOnFloor_~floor#1; 23816#L2987 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 23195#L3094-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 24071#L2778 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 24072#L2790-2 assume { :end_inline_callOnFloor } true; 25606#L3130 assume { :end_inline_initPersonOnFloor } true; 25738#L2396 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret126#1, cleanup_#t~ret127#1, cleanup_~i~3#1, cleanup_~tmp~25#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~25#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 24651#L2715 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 24652#L2742 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 23821#L2266 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 23822#L1651 assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 24174#L982 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 24546#L1655 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 24715#L1668 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 29202#L1803 assume !(0 != timeShift_~tmp___9~2#1); 29203#L1894 assume !(1 == ~doorState~0); 30493#L1894-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 30492#L2715-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 30491#L2742-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 30490#L2266-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 30488#L1534 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 30489#L982-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 30497#L1547 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 30495#L1902 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 30494#L1591 assume !(1 == ~currentHeading~0); 24537#L1601 assume !(0 == ~currentFloorID~0); 24538#L1601-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25386#L1607-1 assume { :end_inline_continueInDirection } true; 23484#L1911-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 25092#L982-3 __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 25093#L480 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 25433#L481 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 25602#L991 __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 25191#L485 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 24587#L540 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 24461#L1926 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 24462#L2423-2 [2021-12-15 17:14:00,626 INFO L793 eck$LassoCheckResult]: Loop: 24462#L2423-2 assume !false; 25734#L2424 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 24724#L2427 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 24725#L805 cleanup_#t~ret126#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 25071#L2431 assume 1 != cleanup_~tmp___0~11#1; 25072#L2431-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 25460#L2715-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 24316#L2742-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 24317#L1090 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 23274#L1154 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 24311#L1167 cleanup_#t~ret127#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~25#1 := cleanup_#t~ret127#1;havoc cleanup_#t~ret127#1; 24934#L2443 assume !(0 != cleanup_~tmp~25#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 25567#L2715-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 25820#L2742-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 25962#L2266-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 25833#L1651-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 25829#L982-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 25805#L1655-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 25157#L1668-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 29920#L1803-2 assume !(0 != timeShift_~tmp___9~2#1); 29921#L1894-3 assume 1 == ~doorState~0;~doorState~0 := 0; 30542#L1894-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 30541#L2715-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 30540#L2742-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 30539#L2266-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 30537#L1534-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 30538#L982-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 25615#L1547-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 23310#L1902-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 23312#L1591-3 assume !(1 == ~currentHeading~0); 25342#L1601-9 assume !(0 == ~currentFloorID~0); 24816#L1601-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 24995#L1607-7 assume { :end_inline_continueInDirection } true; 23854#L1911-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 23855#L982-7 __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 25669#L480-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 23670#L481-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 23672#L991-5 __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 25201#L485-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 24734#L540-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 24757#L1926-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 24462#L2423-2 [2021-12-15 17:14:00,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:14:00,627 INFO L85 PathProgramCache]: Analyzing trace with hash -2064197123, now seen corresponding path program 2 times [2021-12-15 17:14:00,627 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:14:00,627 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1172912788] [2021-12-15 17:14:00,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:14:00,628 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:14:00,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:14:00,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:14:00,682 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:14:00,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1172912788] [2021-12-15 17:14:00,683 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1172912788] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:14:00,683 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:14:00,683 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:14:00,683 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [118225630] [2021-12-15 17:14:00,683 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:14:00,684 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:14:00,686 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:14:00,686 INFO L85 PathProgramCache]: Analyzing trace with hash 1977145662, now seen corresponding path program 1 times [2021-12-15 17:14:00,686 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:14:00,687 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317693136] [2021-12-15 17:14:00,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:14:00,687 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:14:00,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:14:00,729 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:14:00,729 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:14:00,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317693136] [2021-12-15 17:14:00,730 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317693136] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:14:00,731 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:14:00,731 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:14:00,731 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1260805529] [2021-12-15 17:14:00,731 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:14:00,732 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:14:00,732 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:14:00,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:14:00,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:14:00,733 INFO L87 Difference]: Start difference. First operand 7630 states and 14144 transitions. cyclomatic complexity: 6516 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:14:00,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:14:00,948 INFO L93 Difference]: Finished difference Result 11528 states and 21330 transitions. [2021-12-15 17:14:00,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:14:00,949 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11528 states and 21330 transitions. [2021-12-15 17:14:01,000 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7704 [2021-12-15 17:14:01,060 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11528 states to 11528 states and 21330 transitions. [2021-12-15 17:14:01,061 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11528 [2021-12-15 17:14:01,070 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11528 [2021-12-15 17:14:01,070 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11528 states and 21330 transitions. [2021-12-15 17:14:01,086 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:14:01,086 INFO L681 BuchiCegarLoop]: Abstraction has 11528 states and 21330 transitions. [2021-12-15 17:14:01,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11528 states and 21330 transitions. [2021-12-15 17:14:01,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11528 to 11520. [2021-12-15 17:14:01,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11520 states, 11520 states have (on average 1.8505208333333334) internal successors, (21318), 11519 states have internal predecessors, (21318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:14:01,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11520 states to 11520 states and 21318 transitions. [2021-12-15 17:14:01,465 INFO L704 BuchiCegarLoop]: Abstraction has 11520 states and 21318 transitions. [2021-12-15 17:14:01,465 INFO L587 BuchiCegarLoop]: Abstraction has 11520 states and 21318 transitions. [2021-12-15 17:14:01,465 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-15 17:14:01,465 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11520 states and 21318 transitions. [2021-12-15 17:14:01,500 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7696 [2021-12-15 17:14:01,500 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:14:01,500 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:14:01,504 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:14:01,504 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:14:01,505 INFO L791 eck$LassoCheckResult]: Stem: 43451#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 43452#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret132#1, main_~retValue_acc~21#1, main_~tmp~27#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 44940#L3434 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 44704#L3427 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 44450#L3442 main_#t~ret132#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret132#1;havoc main_#t~ret132#1; 44451#L2619 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 44781#L2591 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 43855#L435 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret125#1, bigMacCall_~tmp~24#1;havoc bigMacCall_~tmp~24#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 43856#L3337 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 43608#L3362 bigMacCall_#t~ret125#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~24#1 := bigMacCall_#t~ret125#1;havoc bigMacCall_#t~ret125#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~24#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 44520#L2986 assume 0 == initPersonOnFloor_~floor#1; 42990#L2987 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 42361#L3094-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 43243#L2778 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 43244#L2790-2 assume { :end_inline_callOnFloor } true; 44765#L3130 assume { :end_inline_initPersonOnFloor } true; 44893#L2396 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret126#1, cleanup_#t~ret127#1, cleanup_~i~3#1, cleanup_~tmp~25#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~25#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 43820#L2715 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 43821#L2742 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 42992#L2266 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 42993#L1651 assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 43347#L982 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 43713#L1655 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 43884#L1668 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 44916#L1803 assume !(0 != timeShift_~tmp___9~2#1); 44405#L1894 assume !(1 == ~doorState~0); 44406#L1894-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 44769#L2715-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 43962#L2742-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 43446#L2266-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 42197#L1534 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 42198#L982-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 42857#L1547 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 42858#L1902 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 44702#L1591 assume !(1 == ~currentHeading~0); 43704#L1601 assume !(0 == ~currentFloorID~0); 43705#L1601-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44552#L1607-1 assume { :end_inline_continueInDirection } true; 42658#L1911-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 44265#L982-3 __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 44266#L480 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 44599#L481 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 44761#L991 __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 44365#L485 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 43755#L540 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 43629#L1926 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 43630#L2423-2 [2021-12-15 17:14:01,506 INFO L793 eck$LassoCheckResult]: Loop: 43630#L2423-2 assume !false; 44889#L2424 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 43893#L2427 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 43894#L805 cleanup_#t~ret126#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 44244#L2431 assume 1 != cleanup_~tmp___0~11#1; 44245#L2431-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 44626#L2715-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 43483#L2742-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 43484#L1090 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 42440#L1154 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 43478#L1167 cleanup_#t~ret127#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~25#1 := cleanup_#t~ret127#1;havoc cleanup_#t~ret127#1; 44106#L2443 assume !(0 != cleanup_~tmp~25#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 44251#L2715-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 44153#L2742-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 44154#L2266-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 44713#L1651-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 44714#L982-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 44957#L1655-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 44329#L1668-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 51676#L1803-2 assume !(0 != timeShift_~tmp___9~2#1); 51675#L1894-3 assume 1 == ~doorState~0;~doorState~0 := 0; 51644#L1894-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 51642#L2715-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 51637#L2742-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 43365#L2266-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 43366#L1534-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 44860#L982-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 44774#L1547-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 42476#L1902-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 42478#L1591-3 assume !(1 == ~currentHeading~0); 43975#L1601-9 assume !(0 == ~currentFloorID~0); 43989#L1601-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44168#L1607-7 assume { :end_inline_continueInDirection } true; 43024#L1911-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 43025#L982-7 __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 44828#L480-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 42840#L481-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 42842#L991-5 __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 44373#L485-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 43903#L540-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 43927#L1926-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 43630#L2423-2 [2021-12-15 17:14:01,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:14:01,508 INFO L85 PathProgramCache]: Analyzing trace with hash -2064197123, now seen corresponding path program 3 times [2021-12-15 17:14:01,509 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:14:01,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720928811] [2021-12-15 17:14:01,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:14:01,509 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:14:01,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:14:01,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:14:01,554 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:14:01,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [720928811] [2021-12-15 17:14:01,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [720928811] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:14:01,555 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:14:01,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:14:01,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2137031547] [2021-12-15 17:14:01,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:14:01,556 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:14:01,557 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:14:01,557 INFO L85 PathProgramCache]: Analyzing trace with hash 1584118652, now seen corresponding path program 1 times [2021-12-15 17:14:01,557 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:14:01,557 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1899461931] [2021-12-15 17:14:01,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:14:01,558 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:14:01,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:14:01,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:14:01,613 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:14:01,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1899461931] [2021-12-15 17:14:01,614 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1899461931] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:14:01,614 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:14:01,614 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:14:01,614 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1696532369] [2021-12-15 17:14:01,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:14:01,616 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:14:01,616 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:14:01,616 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:14:01,617 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:14:01,618 INFO L87 Difference]: Start difference. First operand 11520 states and 21318 transitions. cyclomatic complexity: 9800 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:14:02,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:14:02,107 INFO L93 Difference]: Finished difference Result 41177 states and 75904 transitions. [2021-12-15 17:14:02,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:14:02,108 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41177 states and 75904 transitions. [2021-12-15 17:14:02,282 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 36222 [2021-12-15 17:14:02,666 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41177 states to 41177 states and 75904 transitions. [2021-12-15 17:14:02,667 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41177 [2021-12-15 17:14:02,702 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41177 [2021-12-15 17:14:02,703 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41177 states and 75904 transitions. [2021-12-15 17:14:02,753 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:14:02,754 INFO L681 BuchiCegarLoop]: Abstraction has 41177 states and 75904 transitions. [2021-12-15 17:14:02,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41177 states and 75904 transitions. [2021-12-15 17:14:03,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41177 to 14525. [2021-12-15 17:14:03,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14525 states, 14525 states have (on average 1.8387607573149742) internal successors, (26708), 14524 states have internal predecessors, (26708), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:14:03,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14525 states to 14525 states and 26708 transitions. [2021-12-15 17:14:03,143 INFO L704 BuchiCegarLoop]: Abstraction has 14525 states and 26708 transitions. [2021-12-15 17:14:03,144 INFO L587 BuchiCegarLoop]: Abstraction has 14525 states and 26708 transitions. [2021-12-15 17:14:03,144 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-15 17:14:03,144 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14525 states and 26708 transitions. [2021-12-15 17:14:03,179 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9764 [2021-12-15 17:14:03,179 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:14:03,179 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:14:03,183 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:14:03,183 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:14:03,183 INFO L791 eck$LassoCheckResult]: Stem: 96178#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 96179#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret132#1, main_~retValue_acc~21#1, main_~tmp~27#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 97817#L3434 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 97506#L3427 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 97223#L3442 main_#t~ret132#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret132#1;havoc main_#t~ret132#1; 97224#L2619 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 97599#L2591 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 96600#L435 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret125#1, bigMacCall_~tmp~24#1;havoc bigMacCall_~tmp~24#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 96601#L3337 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 96341#L3362 bigMacCall_#t~ret125#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~24#1 := bigMacCall_#t~ret125#1;havoc bigMacCall_#t~ret125#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~24#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 97298#L2986 assume 0 == initPersonOnFloor_~floor#1; 95702#L2987 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95078#L3094-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 95964#L2778 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 95965#L2790-2 assume { :end_inline_callOnFloor } true; 97582#L3130 assume { :end_inline_initPersonOnFloor } true; 97744#L2396 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret126#1, cleanup_#t~ret127#1, cleanup_~i~3#1, cleanup_~tmp~25#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~25#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 96562#L2715 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 96563#L2742 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 95707#L2266 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 95708#L1651 assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 96069#L982 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 96448#L1655 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 96627#L1668 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 97792#L1803 assume !(0 != timeShift_~tmp___9~2#1); 97793#L1894 assume !(1 == ~doorState~0); 97586#L1894-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 97587#L2715-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 96710#L2742-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 96711#L2266-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 94913#L1534 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 94914#L982-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 95571#L1547 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 95572#L1902 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 98121#L1591 assume !(1 == ~currentHeading~0); 96439#L1601 assume !(0 == ~currentFloorID~0); 96440#L1601-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 97428#L1607-1 assume { :end_inline_continueInDirection } true; 95374#L1911-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 97028#L982-3 __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 97029#L480 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 97807#L481 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 97809#L991 __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 103747#L485 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 103748#L540 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 105686#L1926 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 105681#L2423-2 [2021-12-15 17:14:03,185 INFO L793 eck$LassoCheckResult]: Loop: 105681#L2423-2 assume !false; 105644#L2424 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 105616#L2427 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 105611#L805 cleanup_#t~ret126#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 105608#L2431 assume 1 != cleanup_~tmp___0~11#1; 105600#L2431-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 105591#L2715-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 105585#L2742-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 105343#L1090 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 105338#L1154 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 105337#L1167 cleanup_#t~ret127#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~25#1 := cleanup_#t~ret127#1;havoc cleanup_#t~ret127#1; 105336#L2443 assume !(0 != cleanup_~tmp~25#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~17#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 105335#L2715-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 100888#L2742-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 105330#L2266-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 105327#L1651-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~15#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 105323#L982-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 105194#L1655-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 105190#L1668-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 105186#L1803-2 assume !(0 != timeShift_~tmp___9~2#1); 105182#L1894-3 assume !(1 == ~doorState~0); 105180#L1894-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~18#1;havoc isExecutiveFloorCalling_~retValue_acc~18#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 105178#L2715-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 105177#L2742-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~18#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~18#1; 105175#L2266-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 105131#L1534-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 105041#L982-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~12#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~12#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 105034#L1547-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 105029#L1902-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 105022#L1591-3 assume !(1 == ~currentHeading~0); 105017#L1601-9 assume !(0 == ~currentFloorID~0); 105014#L1601-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 105013#L1607-7 assume { :end_inline_continueInDirection } true; 105670#L1911-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret27#1, __utac_acc__Specification2_spec__3_#t~ret28#1, __utac_acc__Specification2_spec__3_#t~ret29#1, __utac_acc__Specification2_spec__3_#t~ret30#1, __utac_acc__Specification2_spec__3_#t~ret31#1, __utac_acc__Specification2_spec__3_#t~ret32#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~3#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 104977#L982-7 __utac_acc__Specification2_spec__3_#t~ret27#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~3#1 := __utac_acc__Specification2_spec__3_#t~ret27#1;havoc __utac_acc__Specification2_spec__3_#t~ret27#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~3#1; 104978#L480-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 104958#L481-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 104959#L991-5 __utac_acc__Specification2_spec__3_#t~ret28#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret28#1;havoc __utac_acc__Specification2_spec__3_#t~ret28#1; 104953#L485-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 104955#L540-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 105687#L1926-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 105681#L2423-2 [2021-12-15 17:14:03,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:14:03,186 INFO L85 PathProgramCache]: Analyzing trace with hash -2064197123, now seen corresponding path program 4 times [2021-12-15 17:14:03,186 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:14:03,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2133767388] [2021-12-15 17:14:03,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:14:03,187 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:14:03,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:14:03,231 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:14:03,232 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:14:03,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2133767388] [2021-12-15 17:14:03,232 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2133767388] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:14:03,233 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:14:03,233 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:14:03,236 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1125054744] [2021-12-15 17:14:03,236 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:14:03,236 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:14:03,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:14:03,237 INFO L85 PathProgramCache]: Analyzing trace with hash 2006820478, now seen corresponding path program 1 times [2021-12-15 17:14:03,238 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:14:03,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1192103422] [2021-12-15 17:14:03,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:14:03,242 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:14:03,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:14:03,344 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:14:03,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:14:03,389 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:14:04,592 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer has thrown an exception: java.lang.UnsupportedOperationException: Set is immutable at de.uni_freiburg.informatik.ultimate.util.datastructures.ImmutableSet.retainAll(ImmutableSet.java:338) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.UnmodifiableTransFormula.removeSuperfluousVars(UnmodifiableTransFormula.java:212) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaBuilder.finishConstruction(TransFormulaBuilder.java:273) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaBuilder.getTrivialTransFormula(TransFormulaBuilder.java:285) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck.synthesize(LassoCheck.java:548) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck$LassoCheckResult.checkLoopTermination(LassoCheck.java:944) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck$LassoCheckResult.(LassoCheck.java:818) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck.(LassoCheck.java:252) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiCegarLoop.iterate(BuchiCegarLoop.java:457) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.doTerminationAnalysis(BuchiAutomizerObserver.java:142) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.finish(BuchiAutomizerObserver.java:397) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2021-12-15 17:14:04,599 INFO L158 Benchmark]: Toolchain (without parser) took 15477.08ms. Allocated memory was 107.0MB in the beginning and 694.2MB in the end (delta: 587.2MB). Free memory was 75.4MB in the beginning and 308.6MB in the end (delta: -233.1MB). Peak memory consumption was 353.3MB. Max. memory is 16.1GB. [2021-12-15 17:14:04,600 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 107.0MB. Free memory is still 63.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-15 17:14:04,600 INFO L158 Benchmark]: CACSL2BoogieTranslator took 668.84ms. Allocated memory was 107.0MB in the beginning and 132.1MB in the end (delta: 25.2MB). Free memory was 75.2MB in the beginning and 103.4MB in the end (delta: -28.2MB). Peak memory consumption was 25.6MB. Max. memory is 16.1GB. [2021-12-15 17:14:04,601 INFO L158 Benchmark]: Boogie Procedure Inliner took 193.92ms. Allocated memory is still 132.1MB. Free memory was 103.3MB in the beginning and 79.2MB in the end (delta: 24.1MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. [2021-12-15 17:14:04,602 INFO L158 Benchmark]: Boogie Preprocessor took 206.92ms. Allocated memory is still 132.1MB. Free memory was 79.2MB in the beginning and 54.0MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2021-12-15 17:14:04,604 INFO L158 Benchmark]: RCFGBuilder took 4083.84ms. Allocated memory was 132.1MB in the beginning and 190.8MB in the end (delta: 58.7MB). Free memory was 54.0MB in the beginning and 64.0MB in the end (delta: -10.0MB). Peak memory consumption was 50.4MB. Max. memory is 16.1GB. [2021-12-15 17:14:04,606 INFO L158 Benchmark]: BuchiAutomizer took 10317.33ms. Allocated memory was 190.8MB in the beginning and 694.2MB in the end (delta: 503.3MB). Free memory was 64.0MB in the beginning and 308.6MB in the end (delta: -244.6MB). Peak memory consumption was 259.8MB. Max. memory is 16.1GB. [2021-12-15 17:14:04,612 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 107.0MB. Free memory is still 63.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 668.84ms. Allocated memory was 107.0MB in the beginning and 132.1MB in the end (delta: 25.2MB). Free memory was 75.2MB in the beginning and 103.4MB in the end (delta: -28.2MB). Peak memory consumption was 25.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 193.92ms. Allocated memory is still 132.1MB. Free memory was 103.3MB in the beginning and 79.2MB in the end (delta: 24.1MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 206.92ms. Allocated memory is still 132.1MB. Free memory was 79.2MB in the beginning and 54.0MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * RCFGBuilder took 4083.84ms. Allocated memory was 132.1MB in the beginning and 190.8MB in the end (delta: 58.7MB). Free memory was 54.0MB in the beginning and 64.0MB in the end (delta: -10.0MB). Peak memory consumption was 50.4MB. Max. memory is 16.1GB. * BuchiAutomizer took 10317.33ms. Allocated memory was 190.8MB in the beginning and 694.2MB in the end (delta: 503.3MB). Free memory was 64.0MB in the beginning and 308.6MB in the end (delta: -244.6MB). Peak memory consumption was 259.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: - ExceptionOrErrorResult: UnsupportedOperationException: Set is immutable de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: UnsupportedOperationException: Set is immutable: de.uni_freiburg.informatik.ultimate.util.datastructures.ImmutableSet.retainAll(ImmutableSet.java:338) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2021-12-15 17:14:04,644 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis No suitable file found in config dir /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config using search string *Termination*32bit*_Bitvector*.epf No suitable settings file found using Termination*32bit*_Bitvector ERROR: UNSUPPORTED PROPERTY Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: UnsupportedOperationException: Set is immutable