./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3a877d22 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cc5b9f71a5434758faa1f6f3febe6f12c158e9feff610b938ef9d4658acd21ff --- Real Ultimate output --- This is Ultimate 0.2.2-3a877d227dc491413fd706022d0c47cd97beb353-3a877d2 [2021-12-15 17:15:03,947 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-15 17:15:03,949 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-15 17:15:03,993 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-15 17:15:03,994 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-15 17:15:03,997 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-15 17:15:03,998 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-15 17:15:04,003 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-15 17:15:04,004 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-15 17:15:04,015 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-15 17:15:04,016 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-15 17:15:04,017 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-15 17:15:04,017 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-15 17:15:04,018 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-15 17:15:04,019 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-15 17:15:04,019 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-15 17:15:04,020 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-15 17:15:04,021 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-15 17:15:04,022 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-15 17:15:04,023 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-15 17:15:04,024 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-15 17:15:04,028 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-15 17:15:04,028 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-15 17:15:04,030 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-15 17:15:04,034 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-15 17:15:04,037 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-15 17:15:04,037 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-15 17:15:04,038 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-15 17:15:04,039 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-15 17:15:04,040 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-15 17:15:04,040 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-15 17:15:04,041 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-15 17:15:04,041 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-15 17:15:04,042 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-15 17:15:04,043 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-15 17:15:04,044 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-15 17:15:04,045 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-15 17:15:04,045 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-15 17:15:04,045 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-15 17:15:04,046 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-15 17:15:04,046 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-15 17:15:04,048 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-15 17:15:04,075 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-15 17:15:04,078 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-15 17:15:04,079 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-15 17:15:04,079 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-15 17:15:04,081 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-15 17:15:04,081 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-15 17:15:04,081 INFO L138 SettingsManager]: * Use SBE=true [2021-12-15 17:15:04,082 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-15 17:15:04,082 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-15 17:15:04,082 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-15 17:15:04,083 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-15 17:15:04,083 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-15 17:15:04,083 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-15 17:15:04,083 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-15 17:15:04,083 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-15 17:15:04,084 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-15 17:15:04,084 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-15 17:15:04,084 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-15 17:15:04,084 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-15 17:15:04,084 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-15 17:15:04,084 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-15 17:15:04,085 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-15 17:15:04,085 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-15 17:15:04,085 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-15 17:15:04,085 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-15 17:15:04,085 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-15 17:15:04,085 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-15 17:15:04,086 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-15 17:15:04,086 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-15 17:15:04,086 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-15 17:15:04,086 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-15 17:15:04,087 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-15 17:15:04,087 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-15 17:15:04,088 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cc5b9f71a5434758faa1f6f3febe6f12c158e9feff610b938ef9d4658acd21ff [2021-12-15 17:15:04,323 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-15 17:15:04,346 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-15 17:15:04,349 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-15 17:15:04,350 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-15 17:15:04,351 INFO L275 PluginConnector]: CDTParser initialized [2021-12-15 17:15:04,352 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c [2021-12-15 17:15:04,415 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/656707389/77c3a7fc42c541718c632a3e37ab4729/FLAG7bf40b28e [2021-12-15 17:15:04,900 INFO L306 CDTParser]: Found 1 translation units. [2021-12-15 17:15:04,902 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c [2021-12-15 17:15:04,935 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/656707389/77c3a7fc42c541718c632a3e37ab4729/FLAG7bf40b28e [2021-12-15 17:15:05,205 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/656707389/77c3a7fc42c541718c632a3e37ab4729 [2021-12-15 17:15:05,207 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-15 17:15:05,209 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-15 17:15:05,211 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-15 17:15:05,212 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-15 17:15:05,214 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-15 17:15:05,215 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,216 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a773566 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05, skipping insertion in model container [2021-12-15 17:15:05,216 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,221 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-15 17:15:05,283 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-15 17:15:05,652 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c[70349,70362] [2021-12-15 17:15:05,653 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:15:05,660 INFO L203 MainTranslator]: Completed pre-run [2021-12-15 17:15:05,746 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec9_product09.cil.c[70349,70362] [2021-12-15 17:15:05,747 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:15:05,767 INFO L208 MainTranslator]: Completed translation [2021-12-15 17:15:05,767 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05 WrapperNode [2021-12-15 17:15:05,768 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-15 17:15:05,768 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-15 17:15:05,769 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-15 17:15:05,769 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-15 17:15:05,774 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,807 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,954 INFO L137 Inliner]: procedures = 89, calls = 327, calls flagged for inlining = 180, calls inlined = 246, statements flattened = 8059 [2021-12-15 17:15:05,955 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-15 17:15:05,956 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-15 17:15:05,956 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-15 17:15:05,956 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-15 17:15:05,963 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,964 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,979 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:05,980 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:06,067 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:06,105 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:06,115 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:06,139 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-15 17:15:06,142 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-15 17:15:06,143 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-15 17:15:06,143 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-15 17:15:06,144 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (1/1) ... [2021-12-15 17:15:06,151 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-15 17:15:06,161 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-15 17:15:06,180 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-15 17:15:06,189 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-15 17:15:06,223 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-15 17:15:06,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-15 17:15:06,223 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-15 17:15:06,224 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-15 17:15:06,388 INFO L236 CfgBuilder]: Building ICFG [2021-12-15 17:15:06,389 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-15 17:15:09,207 INFO L277 CfgBuilder]: Performing block encoding [2021-12-15 17:15:09,233 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-15 17:15:09,234 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-15 17:15:09,240 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:15:09 BoogieIcfgContainer [2021-12-15 17:15:09,240 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-15 17:15:09,243 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-15 17:15:09,243 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-15 17:15:09,246 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-15 17:15:09,247 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:15:09,247 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.12 05:15:05" (1/3) ... [2021-12-15 17:15:09,248 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@277e2cc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:15:09, skipping insertion in model container [2021-12-15 17:15:09,248 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:15:09,248 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:15:05" (2/3) ... [2021-12-15 17:15:09,249 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@277e2cc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:15:09, skipping insertion in model container [2021-12-15 17:15:09,249 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:15:09,249 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:15:09" (3/3) ... [2021-12-15 17:15:09,250 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product09.cil.c [2021-12-15 17:15:09,294 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-15 17:15:09,294 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-15 17:15:09,295 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-15 17:15:09,295 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-15 17:15:09,295 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-15 17:15:09,295 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-15 17:15:09,295 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-15 17:15:09,295 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-15 17:15:09,351 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2387 states, 2386 states have (on average 1.8751047778709136) internal successors, (4474), 2386 states have internal predecessors, (4474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:09,429 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2021-12-15 17:15:09,430 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:09,430 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:09,449 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:09,449 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:09,449 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-15 17:15:09,455 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2387 states, 2386 states have (on average 1.8751047778709136) internal successors, (4474), 2386 states have internal predecessors, (4474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:09,484 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2021-12-15 17:15:09,484 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:09,484 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:09,490 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:09,490 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:09,501 INFO L791 eck$LassoCheckResult]: Stem: 571#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2267#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2135#L3298true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 47#L3291true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1653#L3306true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1447#L1079true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1669#L1049true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 275#L2921true assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 2100#L3110true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 702#L3135true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1796#L423true assume 0 == initPersonOnFloor_~floor#1; 560#L424true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 300#L531-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 991#L215true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 41#L227-2true assume { :end_inline_callOnFloor } true; 45#L567true assume { :end_inline_initPersonOnFloor } true; 1276#L849true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 897#L152true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1767#L179true stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 1843#L1934true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 1127#L1946true timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 1100#L2083true assume !(0 != timeShift_~tmp___9~2#1); 1384#L2174true assume !(1 == ~doorState~0); 2353#L2174-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1662#L1525true assume !(1 == stopRequestedInDirection_~dir#1); 1403#L1694true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1215#L1847true timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 718#L2182true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 1225#L1901true assume !(1 == ~currentHeading~0); 618#L1911true assume !(0 == ~currentFloorID~0); 1557#L1911-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2051#L1917-1true assume { :end_inline_continueInDirection } true; 1228#L2191-2true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1610#L1321true __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 2048#L1381-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 2179#L1413-6true __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 935#L2964true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1648#L2974-1true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 72#L2206true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1247#L879-2true [2021-12-15 17:15:09,507 INFO L793 eck$LassoCheckResult]: Loop: 1247#L879-2true assume !false; 474#L880true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1042#L883true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 999#L1167true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1906#L887true assume 1 != cleanup_~tmp___0~0#1; 1033#L887-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 172#L152-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 257#L179-21true anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 1605#L1429true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 1746#L1493true isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 359#L1506true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1049#L899true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1727#L152-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2347#L179-26true stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 174#L1934-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 841#L1946-1true timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 2215#L2083-2true assume !(0 != timeShift_~tmp___9~2#1); 1846#L2174-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1696#L2174-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360#L1525-2true assume !(1 == stopRequestedInDirection_~dir#1); 1884#L1694-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1017#L1847-2true timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1132#L2182-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 1400#L1901-3true assume !(1 == ~currentHeading~0); 1636#L1911-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1242#L1911-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 307#L1917-7true assume { :end_inline_continueInDirection } true; 1705#L2191-5true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1949#L1321-1true __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 424#L1381-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 640#L1413-13true __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 1210#L2964-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1353#L2974-3true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1573#L2206-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1247#L879-2true [2021-12-15 17:15:09,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:09,515 INFO L85 PathProgramCache]: Analyzing trace with hash 476793912, now seen corresponding path program 1 times [2021-12-15 17:15:09,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:09,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [440330090] [2021-12-15 17:15:09,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:09,533 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:09,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:09,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:09,784 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:09,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [440330090] [2021-12-15 17:15:09,784 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [440330090] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:09,785 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:09,785 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:09,786 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707944877] [2021-12-15 17:15:09,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:09,790 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:09,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:09,791 INFO L85 PathProgramCache]: Analyzing trace with hash -1997008952, now seen corresponding path program 1 times [2021-12-15 17:15:09,791 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:09,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1533438518] [2021-12-15 17:15:09,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:09,792 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:09,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:09,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:09,848 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:09,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1533438518] [2021-12-15 17:15:09,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1533438518] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:09,848 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:09,848 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-15 17:15:09,849 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1399346000] [2021-12-15 17:15:09,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:09,850 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:09,851 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:09,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-15 17:15:09,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-15 17:15:09,902 INFO L87 Difference]: Start difference. First operand has 2387 states, 2386 states have (on average 1.8751047778709136) internal successors, (4474), 2386 states have internal predecessors, (4474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 6 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:10,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:10,438 INFO L93 Difference]: Finished difference Result 4306 states and 7977 transitions. [2021-12-15 17:15:10,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-15 17:15:10,445 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4306 states and 7977 transitions. [2021-12-15 17:15:10,481 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2137 [2021-12-15 17:15:10,521 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4306 states to 4198 states and 7865 transitions. [2021-12-15 17:15:10,522 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4198 [2021-12-15 17:15:10,529 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4198 [2021-12-15 17:15:10,530 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4198 states and 7865 transitions. [2021-12-15 17:15:10,546 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:10,546 INFO L681 BuchiCegarLoop]: Abstraction has 4198 states and 7865 transitions. [2021-12-15 17:15:10,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4198 states and 7865 transitions. [2021-12-15 17:15:10,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4198 to 2368. [2021-12-15 17:15:10,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2368 states, 2368 states have (on average 1.8771114864864864) internal successors, (4445), 2367 states have internal predecessors, (4445), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:10,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2368 states to 2368 states and 4445 transitions. [2021-12-15 17:15:10,701 INFO L704 BuchiCegarLoop]: Abstraction has 2368 states and 4445 transitions. [2021-12-15 17:15:10,701 INFO L587 BuchiCegarLoop]: Abstraction has 2368 states and 4445 transitions. [2021-12-15 17:15:10,701 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-15 17:15:10,702 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2368 states and 4445 transitions. [2021-12-15 17:15:10,715 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1179 [2021-12-15 17:15:10,715 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:10,715 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:10,718 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:10,718 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:10,719 INFO L791 eck$LassoCheckResult]: Stem: 7821#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 7822#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 9068#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6837#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 6838#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 8759#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 8760#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 7319#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 7320#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 8005#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8006#L423 assume 0 == initPersonOnFloor_~floor#1; 7802#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6864#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7368#L215 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6822#L227-2 assume { :end_inline_callOnFloor } true; 6823#L567 assume { :end_inline_initPersonOnFloor } true; 6833#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 8256#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7610#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 8955#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 7190#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 6918#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 8718#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 8981#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 9090#L2083 assume !(0 != timeShift_~tmp___9~2#1); 8716#L2174 assume !(1 == ~doorState~0); 8717#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 8901#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 8730#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 7247#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 8026#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 8028#L1901 assume !(1 == ~currentHeading~0); 7890#L1911 assume !(0 == ~currentFloorID~0); 7891#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8837#L1917-1 assume { :end_inline_continueInDirection } true; 7645#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 8600#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 8872#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 7347#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 8303#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 7647#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 6892#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6893#L879-2 [2021-12-15 17:15:10,719 INFO L793 eck$LassoCheckResult]: Loop: 6893#L879-2 assume !false; 7667#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7668#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 8384#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 8385#L887 assume 1 != cleanup_~tmp___0~0#1; 8417#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 7116#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 7117#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 7291#L1429 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 7462#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 7478#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7479#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 8434#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 6943#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 7120#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 7122#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 6825#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 7572#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 7573#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 9091#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 8983#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 8919#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7480#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 7481#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 7036#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 8401#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 8512#L1901-3 assume !(1 == ~currentHeading~0); 8727#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6910#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7379#L1917-7 assume { :end_inline_continueInDirection } true; 7380#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 8923#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 7589#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 7590#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 7925#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 8286#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 8697#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6893#L879-2 [2021-12-15 17:15:10,720 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:10,720 INFO L85 PathProgramCache]: Analyzing trace with hash -961412041, now seen corresponding path program 1 times [2021-12-15 17:15:10,720 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:10,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [160681430] [2021-12-15 17:15:10,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:10,721 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:10,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:10,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:10,776 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:10,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [160681430] [2021-12-15 17:15:10,776 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [160681430] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:10,776 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:10,776 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:10,777 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1917513462] [2021-12-15 17:15:10,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:10,777 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:10,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:10,778 INFO L85 PathProgramCache]: Analyzing trace with hash -96215188, now seen corresponding path program 1 times [2021-12-15 17:15:10,778 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:10,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029040935] [2021-12-15 17:15:10,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:10,779 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:10,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:10,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:10,891 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:10,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029040935] [2021-12-15 17:15:10,892 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029040935] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:10,892 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:10,892 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-15 17:15:10,893 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538402741] [2021-12-15 17:15:10,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:10,893 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:10,893 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:10,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-15 17:15:10,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-15 17:15:10,894 INFO L87 Difference]: Start difference. First operand 2368 states and 4445 transitions. cyclomatic complexity: 2078 Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:12,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:12,903 INFO L93 Difference]: Finished difference Result 22211 states and 41615 transitions. [2021-12-15 17:15:12,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-15 17:15:12,904 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22211 states and 41615 transitions. [2021-12-15 17:15:13,069 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14714 [2021-12-15 17:15:13,206 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22211 states to 22211 states and 41615 transitions. [2021-12-15 17:15:13,206 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22211 [2021-12-15 17:15:13,239 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22211 [2021-12-15 17:15:13,239 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22211 states and 41615 transitions. [2021-12-15 17:15:13,277 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:13,278 INFO L681 BuchiCegarLoop]: Abstraction has 22211 states and 41615 transitions. [2021-12-15 17:15:13,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22211 states and 41615 transitions. [2021-12-15 17:15:13,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22211 to 4688. [2021-12-15 17:15:13,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4688 states, 4688 states have (on average 1.8764931740614335) internal successors, (8797), 4687 states have internal predecessors, (8797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:13,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4688 states to 4688 states and 8797 transitions. [2021-12-15 17:15:13,527 INFO L704 BuchiCegarLoop]: Abstraction has 4688 states and 8797 transitions. [2021-12-15 17:15:13,527 INFO L587 BuchiCegarLoop]: Abstraction has 4688 states and 8797 transitions. [2021-12-15 17:15:13,527 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-15 17:15:13,528 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4688 states and 8797 transitions. [2021-12-15 17:15:13,541 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2364 [2021-12-15 17:15:13,542 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:13,542 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:13,546 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:13,547 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:13,547 INFO L791 eck$LassoCheckResult]: Stem: 32460#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 32461#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 33820#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 31464#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 31465#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 33449#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 33450#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 31945#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 31946#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 32648#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 32649#L423 assume 0 == initPersonOnFloor_~floor#1; 32441#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 31491#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 31994#L215 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 33027#L227-2 assume { :end_inline_callOnFloor } true; 31459#L567 assume { :end_inline_initPersonOnFloor } true; 31460#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 32906#L152 assume !(0 == isFloorCalling_~floorID#1); 32908#L156 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 34034#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 34033#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 34031#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 34027#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 34026#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 34025#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 34023#L2083 assume !(0 != timeShift_~tmp___9~2#1); 34022#L2174 assume !(1 == ~doorState~0); 34021#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 34019#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 34012#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 33988#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 33986#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 33259#L1901 assume !(1 == ~currentHeading~0); 33260#L1911 assume !(0 == ~currentFloorID~0); 33530#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33531#L1917-1 assume { :end_inline_continueInDirection } true; 33945#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 33944#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 33940#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 33937#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 33927#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 33923#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 33922#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 33920#L879-2 [2021-12-15 17:15:13,547 INFO L793 eck$LassoCheckResult]: Loop: 33920#L879-2 assume !false; 33919#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 33918#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 33917#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 33877#L887 assume 1 != cleanup_~tmp___0~0#1; 33876#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 31743#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 31744#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 31917#L1429 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 33568#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 33878#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 33091#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 33092#L152-26 assume !(0 == isFloorCalling_~floorID#1); 33870#L156-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 35056#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 35055#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 35054#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 35049#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 35048#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 35047#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 35045#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 35044#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 35043#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 35041#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 35021#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 35012#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 35010#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 35007#L1901-3 assume !(1 == ~currentHeading~0); 35006#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 33278#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33279#L1917-7 assume { :end_inline_continueInDirection } true; 35001#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 35000#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 34998#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 34993#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 34985#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 34979#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 33921#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 33920#L879-2 [2021-12-15 17:15:13,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:13,551 INFO L85 PathProgramCache]: Analyzing trace with hash -789039010, now seen corresponding path program 1 times [2021-12-15 17:15:13,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:13,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [578185834] [2021-12-15 17:15:13,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:13,552 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:13,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:13,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:13,649 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:13,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [578185834] [2021-12-15 17:15:13,650 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [578185834] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:13,650 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:13,650 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:13,651 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1965898357] [2021-12-15 17:15:13,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:13,651 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:13,652 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:13,652 INFO L85 PathProgramCache]: Analyzing trace with hash 950560046, now seen corresponding path program 1 times [2021-12-15 17:15:13,652 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:13,652 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038573225] [2021-12-15 17:15:13,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:13,653 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:13,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:13,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:13,723 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:13,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038573225] [2021-12-15 17:15:13,723 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2038573225] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:13,723 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:13,724 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-15 17:15:13,724 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60581883] [2021-12-15 17:15:13,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:13,724 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:13,724 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:13,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-15 17:15:13,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-15 17:15:13,726 INFO L87 Difference]: Start difference. First operand 4688 states and 8797 transitions. cyclomatic complexity: 4110 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:16,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:16,610 INFO L93 Difference]: Finished difference Result 16542 states and 30973 transitions. [2021-12-15 17:15:16,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2021-12-15 17:15:16,611 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16542 states and 30973 transitions. [2021-12-15 17:15:16,696 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8863 [2021-12-15 17:15:16,758 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16542 states to 16542 states and 30973 transitions. [2021-12-15 17:15:16,759 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16542 [2021-12-15 17:15:16,774 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16542 [2021-12-15 17:15:16,775 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16542 states and 30973 transitions. [2021-12-15 17:15:16,793 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:16,794 INFO L681 BuchiCegarLoop]: Abstraction has 16542 states and 30973 transitions. [2021-12-15 17:15:16,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16542 states and 30973 transitions. [2021-12-15 17:15:16,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16542 to 8414. [2021-12-15 17:15:17,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8414 states, 8414 states have (on average 1.8744948894699311) internal successors, (15772), 8413 states have internal predecessors, (15772), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:17,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8414 states to 8414 states and 15772 transitions. [2021-12-15 17:15:17,047 INFO L704 BuchiCegarLoop]: Abstraction has 8414 states and 15772 transitions. [2021-12-15 17:15:17,047 INFO L587 BuchiCegarLoop]: Abstraction has 8414 states and 15772 transitions. [2021-12-15 17:15:17,047 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-15 17:15:17,048 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8414 states and 15772 transitions. [2021-12-15 17:15:17,074 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4279 [2021-12-15 17:15:17,074 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:17,074 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:17,076 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:17,077 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:17,077 INFO L791 eck$LassoCheckResult]: Stem: 53752#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 53753#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 55105#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 52750#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 52751#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 54741#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 54742#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 53233#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 53234#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 53941#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 53942#L423 assume 0 == initPersonOnFloor_~floor#1; 53732#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52778#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 53282#L215 assume !(0 == callOnFloor_~floorID#1); 54047#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 52734#L227-2 assume { :end_inline_callOnFloor } true; 52735#L567 assume { :end_inline_initPersonOnFloor } true; 54604#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 54605#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 55147#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 55201#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 55200#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 52832#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 54696#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 54992#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 55205#L2083 assume !(0 != timeShift_~tmp___9~2#1); 54694#L2174 assume !(1 == ~doorState~0); 54695#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 54899#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 54900#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 60949#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 60948#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 54564#L1901 assume !(1 == ~currentHeading~0); 54565#L1911 assume !(0 == ~currentFloorID~0); 53824#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54824#L1917-1 assume { :end_inline_continueInDirection } true; 53568#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 54569#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 54863#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 53261#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 54250#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 53570#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 52806#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 52807#L879-2 [2021-12-15 17:15:17,078 INFO L793 eck$LassoCheckResult]: Loop: 52807#L879-2 assume !false; 53592#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 53593#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 54377#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 55204#L887 assume 1 != cleanup_~tmp___0~0#1; 55199#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 55198#L152-21 assume !(0 == isFloorCalling_~floorID#1); 55184#L156-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 55172#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 55164#L1429 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 55155#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 55154#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 55153#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 55152#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 55151#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 55150#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 55149#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 52737#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 53491#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 53493#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 55206#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 54994#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 54919#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 53395#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 53396#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 52950#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 54467#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 54469#L1901-3 assume !(1 == ~currentHeading~0); 61049#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 52824#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 53293#L1917-7 assume { :end_inline_continueInDirection } true; 53294#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 54923#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 53510#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 53511#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 53859#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 54232#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 54673#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 52807#L879-2 [2021-12-15 17:15:17,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:17,079 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 1 times [2021-12-15 17:15:17,079 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:17,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505011332] [2021-12-15 17:15:17,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:17,079 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:17,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:17,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:17,145 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:17,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1505011332] [2021-12-15 17:15:17,146 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1505011332] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:17,146 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:17,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:17,148 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [779891353] [2021-12-15 17:15:17,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:17,149 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:17,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:17,151 INFO L85 PathProgramCache]: Analyzing trace with hash -984260868, now seen corresponding path program 1 times [2021-12-15 17:15:17,152 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:17,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636505619] [2021-12-15 17:15:17,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:17,153 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:17,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:17,182 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:17,182 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:17,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636505619] [2021-12-15 17:15:17,183 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636505619] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:17,183 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:17,183 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:17,183 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922023542] [2021-12-15 17:15:17,183 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:17,184 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:17,184 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:17,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:15:17,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:15:17,186 INFO L87 Difference]: Start difference. First operand 8414 states and 15772 transitions. cyclomatic complexity: 7359 Second operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:17,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:17,589 INFO L93 Difference]: Finished difference Result 9184 states and 17104 transitions. [2021-12-15 17:15:17,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:15:17,590 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9184 states and 17104 transitions. [2021-12-15 17:15:17,618 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4640 [2021-12-15 17:15:17,651 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9184 states to 9184 states and 17104 transitions. [2021-12-15 17:15:17,652 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9184 [2021-12-15 17:15:17,659 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9184 [2021-12-15 17:15:17,660 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9184 states and 17104 transitions. [2021-12-15 17:15:17,670 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:17,670 INFO L681 BuchiCegarLoop]: Abstraction has 9184 states and 17104 transitions. [2021-12-15 17:15:17,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9184 states and 17104 transitions. [2021-12-15 17:15:17,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9184 to 8260. [2021-12-15 17:15:17,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8260 states, 8260 states have (on average 1.8711864406779661) internal successors, (15456), 8259 states have internal predecessors, (15456), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:17,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8260 states to 8260 states and 15456 transitions. [2021-12-15 17:15:17,898 INFO L704 BuchiCegarLoop]: Abstraction has 8260 states and 15456 transitions. [2021-12-15 17:15:17,898 INFO L587 BuchiCegarLoop]: Abstraction has 8260 states and 15456 transitions. [2021-12-15 17:15:17,898 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-15 17:15:17,899 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8260 states and 15456 transitions. [2021-12-15 17:15:17,924 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4157 [2021-12-15 17:15:17,925 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:17,925 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:17,927 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:17,928 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:17,929 INFO L791 eck$LassoCheckResult]: Stem: 71333#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 71334#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 72626#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 70348#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 70349#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 72287#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 72288#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 70823#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 70824#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 71517#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 71518#L423 assume 0 == initPersonOnFloor_~floor#1; 71316#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 70377#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 70873#L215 assume !(0 == callOnFloor_~floorID#1); 71616#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 70333#L227-2 assume { :end_inline_callOnFloor } true; 70334#L567 assume { :end_inline_initPersonOnFloor } true; 70347#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 72160#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 76788#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 76786#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 70695#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 70427#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 72245#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 76787#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 77036#L2083 assume !(0 != timeShift_~tmp___9~2#1); 77035#L2174 assume !(1 == ~doorState~0); 77034#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 77032#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 77033#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 71814#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 72110#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 76899#L1901 assume !(1 == ~currentHeading~0); 78500#L1911 assume !(0 == ~currentFloorID~0); 71400#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 72365#L1917-1 assume { :end_inline_continueInDirection } true; 71158#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 77214#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 77210#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 77207#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 77197#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 77193#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 77178#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 72682#L879-2 [2021-12-15 17:15:17,930 INFO L793 eck$LassoCheckResult]: Loop: 72682#L879-2 assume !false; 72680#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 72677#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 72676#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 72674#L887 assume 1 != cleanup_~tmp___0~0#1; 72675#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 72670#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 72671#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 72665#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 72667#L1433 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 72687#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 72686#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 72685#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 72683#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 72684#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 72678#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 72679#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 77172#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 71079#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 71081#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 77324#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 77325#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 77359#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 77357#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 77358#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 77355#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 77395#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 77374#L1901-3 assume !(1 == ~currentHeading~0); 77231#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 77228#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 77227#L1917-7 assume { :end_inline_continueInDirection } true; 77224#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 77223#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 77221#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 77216#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 77185#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 77179#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 77177#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 72682#L879-2 [2021-12-15 17:15:17,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:17,931 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 2 times [2021-12-15 17:15:17,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:17,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1476772784] [2021-12-15 17:15:17,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:17,932 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:17,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:17,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:17,978 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:17,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1476772784] [2021-12-15 17:15:17,978 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1476772784] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:17,979 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:17,979 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:17,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288480340] [2021-12-15 17:15:17,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:17,979 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:17,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:17,980 INFO L85 PathProgramCache]: Analyzing trace with hash 338332849, now seen corresponding path program 1 times [2021-12-15 17:15:17,980 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:17,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22154083] [2021-12-15 17:15:17,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:17,981 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:17,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:18,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:18,028 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:18,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22154083] [2021-12-15 17:15:18,029 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [22154083] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:18,029 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:18,029 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:15:18,029 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255007036] [2021-12-15 17:15:18,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:18,030 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:18,030 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:18,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:15:18,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:15:18,031 INFO L87 Difference]: Start difference. First operand 8260 states and 15456 transitions. cyclomatic complexity: 7197 Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:18,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:18,494 INFO L93 Difference]: Finished difference Result 33051 states and 61938 transitions. [2021-12-15 17:15:18,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:15:18,495 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33051 states and 61938 transitions. [2021-12-15 17:15:18,611 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22048 [2021-12-15 17:15:18,736 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33051 states to 33051 states and 61938 transitions. [2021-12-15 17:15:18,737 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33051 [2021-12-15 17:15:18,767 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33051 [2021-12-15 17:15:18,768 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33051 states and 61938 transitions. [2021-12-15 17:15:18,802 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:18,803 INFO L681 BuchiCegarLoop]: Abstraction has 33051 states and 61938 transitions. [2021-12-15 17:15:18,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33051 states and 61938 transitions. [2021-12-15 17:15:19,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33051 to 14983. [2021-12-15 17:15:19,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.871454314890209) internal successors, (28040), 14982 states have internal predecessors, (28040), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:19,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 28040 transitions. [2021-12-15 17:15:19,296 INFO L704 BuchiCegarLoop]: Abstraction has 14983 states and 28040 transitions. [2021-12-15 17:15:19,296 INFO L587 BuchiCegarLoop]: Abstraction has 14983 states and 28040 transitions. [2021-12-15 17:15:19,297 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-15 17:15:19,297 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 28040 transitions. [2021-12-15 17:15:19,338 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2021-12-15 17:15:19,339 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:19,339 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:19,343 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:19,343 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:19,344 INFO L791 eck$LassoCheckResult]: Stem: 112678#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 112679#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 114119#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 111682#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 111683#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 113696#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 113697#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 112157#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 112158#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 112872#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 112873#L423 assume 0 == initPersonOnFloor_~floor#1; 112658#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 111708#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 112207#L215 assume !(0 == callOnFloor_~floorID#1); 112975#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 111666#L227-2 assume { :end_inline_callOnFloor } true; 111667#L567 assume { :end_inline_initPersonOnFloor } true; 113558#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 113559#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 114197#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 114195#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 114192#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 114193#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 114586#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 114584#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 114577#L2083 assume !(0 != timeShift_~tmp___9~2#1); 114576#L2174 assume !(1 == ~doorState~0); 114561#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 114559#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 114520#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 114505#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 114501#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 114502#L1901 assume !(1 == ~currentHeading~0); 114773#L1911 assume !(0 == ~currentFloorID~0); 114774#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 114914#L1917-1 assume { :end_inline_continueInDirection } true; 114912#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 114911#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 114907#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 114904#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 114894#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 114890#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 114889#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 114887#L879-2 [2021-12-15 17:15:19,344 INFO L793 eck$LassoCheckResult]: Loop: 114887#L879-2 assume !false; 114885#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 114883#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 114877#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 114875#L887 assume 1 != cleanup_~tmp___0~0#1; 114873#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 114871#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 114869#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 114866#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 114865#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 114860#L152-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 114847#L179-22 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 114843#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 114751#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 114446#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 114363#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 114360#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 114358#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 114356#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 114354#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 114345#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 114342#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 114340#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 114337#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 114335#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 114333#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 114330#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 114308#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 114303#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 114304#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 114602#L1901-3 assume !(1 == ~currentHeading~0); 114447#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 111751#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 112217#L1917-7 assume { :end_inline_continueInDirection } true; 112218#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 113895#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 112434#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 112435#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 112785#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 113163#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 113625#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 114887#L879-2 [2021-12-15 17:15:19,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:19,345 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 3 times [2021-12-15 17:15:19,345 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:19,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694984650] [2021-12-15 17:15:19,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:19,346 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:19,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:19,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:19,378 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:19,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694984650] [2021-12-15 17:15:19,379 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694984650] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:19,379 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:19,379 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:19,379 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231456213] [2021-12-15 17:15:19,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:19,380 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:19,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:19,380 INFO L85 PathProgramCache]: Analyzing trace with hash 269781844, now seen corresponding path program 1 times [2021-12-15 17:15:19,380 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:19,380 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297616423] [2021-12-15 17:15:19,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:19,381 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:19,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:19,413 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:19,414 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:19,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297616423] [2021-12-15 17:15:19,418 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297616423] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:19,418 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:19,418 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:15:19,418 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783954541] [2021-12-15 17:15:19,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:19,419 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:19,419 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:19,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:15:19,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:15:19,420 INFO L87 Difference]: Start difference. First operand 14983 states and 28040 transitions. cyclomatic complexity: 13058 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:19,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:19,945 INFO L93 Difference]: Finished difference Result 16346 states and 30355 transitions. [2021-12-15 17:15:19,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-15 17:15:19,946 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16346 states and 30355 transitions. [2021-12-15 17:15:20,009 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8998 [2021-12-15 17:15:20,062 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16346 states to 16346 states and 30355 transitions. [2021-12-15 17:15:20,063 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16346 [2021-12-15 17:15:20,076 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16346 [2021-12-15 17:15:20,077 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16346 states and 30355 transitions. [2021-12-15 17:15:20,098 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:20,098 INFO L681 BuchiCegarLoop]: Abstraction has 16346 states and 30355 transitions. [2021-12-15 17:15:20,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16346 states and 30355 transitions. [2021-12-15 17:15:20,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16346 to 14983. [2021-12-15 17:15:20,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.8618434225455516) internal successors, (27896), 14982 states have internal predecessors, (27896), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:20,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 27896 transitions. [2021-12-15 17:15:20,466 INFO L704 BuchiCegarLoop]: Abstraction has 14983 states and 27896 transitions. [2021-12-15 17:15:20,467 INFO L587 BuchiCegarLoop]: Abstraction has 14983 states and 27896 transitions. [2021-12-15 17:15:20,467 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-15 17:15:20,467 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 27896 transitions. [2021-12-15 17:15:20,513 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2021-12-15 17:15:20,513 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:20,513 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:20,518 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:20,518 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:20,518 INFO L791 eck$LassoCheckResult]: Stem: 144019#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 144020#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 145490#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 143027#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 143028#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 145059#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 145060#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 143505#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 143506#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 144212#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 144213#L423 assume 0 == initPersonOnFloor_~floor#1; 144002#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 143055#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 143555#L215 assume !(0 == callOnFloor_~floorID#1); 144315#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 143014#L227-2 assume { :end_inline_callOnFloor } true; 143015#L567 assume { :end_inline_initPersonOnFloor } true; 144908#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 144909#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 145579#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 145578#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 145577#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 143104#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 145011#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 145331#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 145576#L2083 assume !(0 != timeShift_~tmp___9~2#1); 145009#L2174 assume !(1 == ~doorState~0); 145010#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 145223#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 145224#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 157173#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 157170#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 157171#L1901 assume !(1 == ~currentHeading~0); 157225#L1911 assume !(0 == ~currentFloorID~0); 157223#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 157037#L1917-1 assume { :end_inline_continueInDirection } true; 157013#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 157011#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 157006#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 156997#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 156986#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 156969#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 156967#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 145596#L879-2 [2021-12-15 17:15:20,519 INFO L793 eck$LassoCheckResult]: Loop: 145596#L879-2 assume !false; 145594#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 145592#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 145575#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 145573#L887 assume 1 != cleanup_~tmp___0~0#1; 145574#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 145614#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 145613#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 145611#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 145610#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 145531#L152-22 assume !(0 == isFloorCalling_~floorID#1); 145532#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 144966#L179-22 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 144967#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 145605#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 145600#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 145601#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 145597#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 145595#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 145593#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 144796#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 143012#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 143764#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 143766#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 155894#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 156795#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 156814#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 156810#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 156811#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 156875#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 157067#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 157062#L1901-3 assume !(1 == ~currentHeading~0); 157059#L1911-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 157035#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 157016#L1917-7 assume { :end_inline_continueInDirection } true; 157012#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 157010#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 157002#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 156996#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 156975#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 156968#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 156966#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 145596#L879-2 [2021-12-15 17:15:20,519 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:20,519 INFO L85 PathProgramCache]: Analyzing trace with hash -1516280664, now seen corresponding path program 4 times [2021-12-15 17:15:20,520 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:20,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [56675652] [2021-12-15 17:15:20,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:20,520 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:20,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:20,544 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:20,544 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:20,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [56675652] [2021-12-15 17:15:20,545 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [56675652] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:20,545 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:20,545 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:20,545 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223335736] [2021-12-15 17:15:20,545 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:20,546 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:20,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:20,546 INFO L85 PathProgramCache]: Analyzing trace with hash 1646671545, now seen corresponding path program 1 times [2021-12-15 17:15:20,546 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:20,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [496500340] [2021-12-15 17:15:20,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:20,547 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:20,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:20,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:20,568 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:20,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [496500340] [2021-12-15 17:15:20,568 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [496500340] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:20,568 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:20,569 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:15:20,569 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313118052] [2021-12-15 17:15:20,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:20,569 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:20,569 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:20,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:15:20,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:15:20,570 INFO L87 Difference]: Start difference. First operand 14983 states and 27896 transitions. cyclomatic complexity: 12914 Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:20,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:20,761 INFO L93 Difference]: Finished difference Result 22695 states and 42101 transitions. [2021-12-15 17:15:20,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:15:20,762 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22695 states and 42101 transitions. [2021-12-15 17:15:20,984 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15688 [2021-12-15 17:15:21,121 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22695 states to 22695 states and 42101 transitions. [2021-12-15 17:15:21,142 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22695 [2021-12-15 17:15:21,173 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22695 [2021-12-15 17:15:21,174 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22695 states and 42101 transitions. [2021-12-15 17:15:21,231 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:21,232 INFO L681 BuchiCegarLoop]: Abstraction has 22695 states and 42101 transitions. [2021-12-15 17:15:21,247 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22695 states and 42101 transitions. [2021-12-15 17:15:21,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22695 to 15001. [2021-12-15 17:15:21,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15001 states, 15001 states have (on average 1.8608092793813746) internal successors, (27914), 15000 states have internal predecessors, (27914), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:21,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15001 states to 15001 states and 27914 transitions. [2021-12-15 17:15:21,479 INFO L704 BuchiCegarLoop]: Abstraction has 15001 states and 27914 transitions. [2021-12-15 17:15:21,479 INFO L587 BuchiCegarLoop]: Abstraction has 15001 states and 27914 transitions. [2021-12-15 17:15:21,479 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-15 17:15:21,480 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15001 states and 27914 transitions. [2021-12-15 17:15:21,620 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8264 [2021-12-15 17:15:21,620 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:21,620 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:21,624 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:21,624 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:21,624 INFO L791 eck$LassoCheckResult]: Stem: 181713#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 181714#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 183224#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 180716#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 180717#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 182779#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 182780#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 181194#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 181195#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 181915#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 181916#L423 assume 0 == initPersonOnFloor_~floor#1; 181696#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 180744#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 181246#L215 assume !(0 == callOnFloor_~floorID#1); 182023#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 180703#L227-2 assume { :end_inline_callOnFloor } true; 180704#L567 assume { :end_inline_initPersonOnFloor } true; 182624#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 182625#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 183316#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 183315#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 183312#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 183313#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 183560#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 183559#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 183558#L2083 assume !(0 != timeShift_~tmp___9~2#1); 183557#L2174 assume !(1 == ~doorState~0); 183556#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 183554#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 183555#L1694 assume !(0 == ~currentFloorID~0); 182051#L1700 assume !(~currentFloorID~0 > 0); 181441#L1715 assume ~currentFloorID~0 > 0; 182464#L1717 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 182466#L1718 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~13#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 183583#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 183584#L2182 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 189910#L1901 assume !(1 == ~currentHeading~0); 189907#L1911 assume !(0 == ~currentFloorID~0); 189901#L1911-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 189898#L1917-1 assume { :end_inline_continueInDirection } true; 189896#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 189895#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 189891#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 189888#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 189878#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 189874#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 189873#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 189871#L879-2 [2021-12-15 17:15:21,625 INFO L793 eck$LassoCheckResult]: Loop: 189871#L879-2 assume !false; 189870#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 189869#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 189868#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 189867#L887 assume 1 != cleanup_~tmp___0~0#1; 189866#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 189865#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 189864#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 189863#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 183587#L1433 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 183586#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 183585#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 183461#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 183459#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 183456#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 183453#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 183448#L1338-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 183439#L1342-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 183436#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 183434#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 183432#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 183429#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 183427#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 183425#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 183420#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 183421#L1694-2 assume !(0 == ~currentFloorID~0); 183330#L1700-2 assume !(~currentFloorID~0 > 0); 183256#L1715-2 assume ~currentFloorID~0 > 0; 182697#L1717-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 182698#L1718-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~13#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 192479#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 192480#L2182-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 192606#L1901-3 assume !(1 == ~currentHeading~0); 192604#L1911-9 assume !(0 == ~currentFloorID~0); 192602#L1911-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 192601#L1917-7 assume { :end_inline_continueInDirection } true; 192597#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 192596#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 192579#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 192419#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 192226#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 192043#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 189872#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 189871#L879-2 [2021-12-15 17:15:21,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:21,625 INFO L85 PathProgramCache]: Analyzing trace with hash -721880161, now seen corresponding path program 1 times [2021-12-15 17:15:21,626 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:21,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1754828974] [2021-12-15 17:15:21,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:21,626 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:21,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:21,655 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:21,655 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:21,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1754828974] [2021-12-15 17:15:21,655 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1754828974] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:21,656 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:21,656 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:21,657 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [900799331] [2021-12-15 17:15:21,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:21,657 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:21,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:21,658 INFO L85 PathProgramCache]: Analyzing trace with hash 1314929166, now seen corresponding path program 1 times [2021-12-15 17:15:21,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:21,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1644392151] [2021-12-15 17:15:21,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:21,664 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:21,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:21,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:21,690 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:21,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1644392151] [2021-12-15 17:15:21,693 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1644392151] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:21,693 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:21,693 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-15 17:15:21,694 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80460741] [2021-12-15 17:15:21,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:21,694 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:21,694 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:21,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-15 17:15:21,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-15 17:15:21,695 INFO L87 Difference]: Start difference. First operand 15001 states and 27914 transitions. cyclomatic complexity: 12914 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:22,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:22,676 INFO L93 Difference]: Finished difference Result 20451 states and 37992 transitions. [2021-12-15 17:15:22,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-15 17:15:22,677 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20451 states and 37992 transitions. [2021-12-15 17:15:22,749 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15875 [2021-12-15 17:15:22,796 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20451 states to 20451 states and 37992 transitions. [2021-12-15 17:15:22,796 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20451 [2021-12-15 17:15:22,813 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20451 [2021-12-15 17:15:22,813 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20451 states and 37992 transitions. [2021-12-15 17:15:22,933 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:22,934 INFO L681 BuchiCegarLoop]: Abstraction has 20451 states and 37992 transitions. [2021-12-15 17:15:22,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20451 states and 37992 transitions. [2021-12-15 17:15:23,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20451 to 11391. [2021-12-15 17:15:23,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11391 states, 11391 states have (on average 1.8513738916688613) internal successors, (21089), 11390 states have internal predecessors, (21089), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:23,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11391 states to 11391 states and 21089 transitions. [2021-12-15 17:15:23,097 INFO L704 BuchiCegarLoop]: Abstraction has 11391 states and 21089 transitions. [2021-12-15 17:15:23,097 INFO L587 BuchiCegarLoop]: Abstraction has 11391 states and 21089 transitions. [2021-12-15 17:15:23,097 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-15 17:15:23,097 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11391 states and 21089 transitions. [2021-12-15 17:15:23,133 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8308 [2021-12-15 17:15:23,134 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:23,134 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:23,140 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:23,140 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:23,140 INFO L791 eck$LassoCheckResult]: Stem: 217106#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 217107#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 218435#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 216182#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 216183#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 218059#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 218060#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 216627#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 216628#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 217286#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 217287#L423 assume 0 == initPersonOnFloor_~floor#1; 217088#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 216210#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 216673#L215 assume !(0 == callOnFloor_~floorID#1); 217384#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 217385#L227-2 assume { :end_inline_callOnFloor } true; 218497#L567 assume { :end_inline_initPersonOnFloor } true; 218496#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 218495#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 218494#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 218493#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 216509#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 216510#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 218021#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 218307#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 218492#L2083 assume !(0 != timeShift_~tmp___9~2#1); 218019#L2174 assume !(1 == ~doorState~0); 218020#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 218215#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 218036#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 216655#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 217306#L2182 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 217307#L1956 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 218228#L1961 timeShift_#t~ret59#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 218160#L1525-1 assume !(1 == stopRequestedInDirection_~dir#1); 216293#L1694-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 216276#L1847-1 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 217127#L2191 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 217460#L1901-2 assume !(1 == ~currentHeading~0); 217462#L1911-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 217582#L1911-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 218022#L1917-5 assume { :end_inline_continueInDirection } true; 216929#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 224370#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 224366#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 224363#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 224353#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 224349#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 224348#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 218603#L879-2 [2021-12-15 17:15:23,142 INFO L793 eck$LassoCheckResult]: Loop: 218603#L879-2 assume !false; 218604#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 218599#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 218600#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 218595#L887 assume 1 != cleanup_~tmp___0~0#1; 218596#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 218591#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 218592#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 218586#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 218588#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 218583#L152-22 assume !(0 == isFloorCalling_~floorID#1); 218577#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 218560#L179-22 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 218561#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 218536#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 218537#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 218528#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 218529#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 218524#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 218513#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 218515#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 218521#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 218520#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 218519#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 218517#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 218516#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 218232#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216775#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 216776#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 217180#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 217800#L2182-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 217801#L1956-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~16#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 218311#L1961-2 timeShift_#t~ret59#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 217806#L1525-3 assume !(1 == stopRequestedInDirection_~dir#1); 217807#L1694-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 217709#L1847-3 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 217840#L2191-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 217841#L1901-5 assume !(1 == ~currentHeading~0); 218152#L1911-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 217017#L1911-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 216979#L1917-11 assume { :end_inline_continueInDirection } true; 216684#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 225061#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 224544#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 224471#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 224377#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 224371#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 224347#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 218603#L879-2 [2021-12-15 17:15:23,142 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:23,142 INFO L85 PathProgramCache]: Analyzing trace with hash 2005292259, now seen corresponding path program 1 times [2021-12-15 17:15:23,143 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:23,143 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [466171539] [2021-12-15 17:15:23,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:23,143 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:23,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:23,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:23,175 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:23,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [466171539] [2021-12-15 17:15:23,175 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [466171539] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:23,176 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:23,176 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:23,176 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1894061868] [2021-12-15 17:15:23,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:23,176 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:23,177 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:23,177 INFO L85 PathProgramCache]: Analyzing trace with hash 739571150, now seen corresponding path program 1 times [2021-12-15 17:15:23,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:23,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1774873870] [2021-12-15 17:15:23,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:23,178 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:23,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:23,209 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:23,209 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:23,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1774873870] [2021-12-15 17:15:23,209 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1774873870] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:23,209 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:23,210 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:15:23,210 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [813626835] [2021-12-15 17:15:23,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:23,210 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:23,210 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:23,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:15:23,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:15:23,211 INFO L87 Difference]: Start difference. First operand 11391 states and 21089 transitions. cyclomatic complexity: 9699 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:23,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:23,396 INFO L93 Difference]: Finished difference Result 34119 states and 63121 transitions. [2021-12-15 17:15:23,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:15:23,397 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34119 states and 63121 transitions. [2021-12-15 17:15:23,673 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 30867 [2021-12-15 17:15:23,754 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34119 states to 34119 states and 63121 transitions. [2021-12-15 17:15:23,754 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34119 [2021-12-15 17:15:23,786 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34119 [2021-12-15 17:15:23,786 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34119 states and 63121 transitions. [2021-12-15 17:15:23,811 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:23,811 INFO L681 BuchiCegarLoop]: Abstraction has 34119 states and 63121 transitions. [2021-12-15 17:15:23,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34119 states and 63121 transitions. [2021-12-15 17:15:23,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34119 to 11403. [2021-12-15 17:15:23,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11403 states, 11403 states have (on average 1.8504779444005963) internal successors, (21101), 11402 states have internal predecessors, (21101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:24,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11403 states to 11403 states and 21101 transitions. [2021-12-15 17:15:24,013 INFO L704 BuchiCegarLoop]: Abstraction has 11403 states and 21101 transitions. [2021-12-15 17:15:24,013 INFO L587 BuchiCegarLoop]: Abstraction has 11403 states and 21101 transitions. [2021-12-15 17:15:24,013 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-15 17:15:24,013 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11403 states and 21101 transitions. [2021-12-15 17:15:24,032 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8318 [2021-12-15 17:15:24,032 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:24,032 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:24,032 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:24,033 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:24,033 INFO L791 eck$LassoCheckResult]: Stem: 262628#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 262629#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 263958#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 261703#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 261704#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 263582#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 263583#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 262153#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 262154#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 262807#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 262808#L423 assume 0 == initPersonOnFloor_~floor#1; 262609#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 261730#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 262200#L215 assume !(0 == callOnFloor_~floorID#1); 262905#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 262906#L227-2 assume { :end_inline_callOnFloor } true; 264019#L567 assume { :end_inline_initPersonOnFloor } true; 264018#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 264017#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 264016#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 264015#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 262032#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 262033#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 263544#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 263836#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 264014#L2083 assume !(0 != timeShift_~tmp___9~2#1); 263542#L2174 assume !(1 == ~doorState~0); 263543#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 263738#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 263557#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 262179#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 262826#L2182 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 262827#L1956 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 263895#L1961 timeShift_#t~ret59#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 264012#L1525-1 assume !(1 == stopRequestedInDirection_~dir#1); 261815#L1694-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 261798#L1847-1 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 262649#L2191 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 262978#L1901-2 assume !(1 == ~currentHeading~0); 262980#L1911-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 263099#L1911-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 263545#L1917-5 assume { :end_inline_continueInDirection } true; 262454#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 263416#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 263702#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 262181#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 263102#L2964 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 262456#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 263730#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 264249#L879-2 [2021-12-15 17:15:24,033 INFO L793 eck$LassoCheckResult]: Loop: 264249#L879-2 assume !false; 264247#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 264245#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 264243#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 264241#L887 assume 1 != cleanup_~tmp___0~0#1; 264239#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 264238#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 264236#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 264229#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 264225#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 264222#L152-22 assume !(0 == isFloorCalling_~floorID#1); 264219#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 264199#L179-22 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 264172#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 264160#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 264158#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 264154#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 264155#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 264110#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 264109#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 264108#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 264107#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 264105#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 264104#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 264099#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 263838#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 263756#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 262301#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 262302#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 262702#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 263316#L2182-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 263317#L1956-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 263916#L1961-2 timeShift_#t~ret59#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 264048#L1525-3 assume !(1 == stopRequestedInDirection_~dir#1); 263789#L1694-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 263769#L1847-3 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 266345#L2191-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 266343#L1901-5 assume !(1 == ~currentHeading~0); 266340#L1911-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 266338#L1911-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 266335#L1917-11 assume { :end_inline_continueInDirection } true; 266312#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 266308#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 266274#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 266261#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 266231#L2964-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 266224#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 266116#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 264249#L879-2 [2021-12-15 17:15:24,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:24,034 INFO L85 PathProgramCache]: Analyzing trace with hash 2005292259, now seen corresponding path program 2 times [2021-12-15 17:15:24,034 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:24,034 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1930087188] [2021-12-15 17:15:24,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:24,034 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:24,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:24,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:24,060 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:24,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1930087188] [2021-12-15 17:15:24,060 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1930087188] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:24,060 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:24,061 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:24,061 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [368963743] [2021-12-15 17:15:24,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:24,062 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:24,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:24,063 INFO L85 PathProgramCache]: Analyzing trace with hash -848776752, now seen corresponding path program 1 times [2021-12-15 17:15:24,063 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:24,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1814381925] [2021-12-15 17:15:24,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:24,065 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:24,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:24,090 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:24,090 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:24,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1814381925] [2021-12-15 17:15:24,091 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1814381925] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:24,091 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:24,091 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:15:24,091 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50930647] [2021-12-15 17:15:24,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:24,092 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:15:24,092 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:15:24,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:15:24,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:15:24,093 INFO L87 Difference]: Start difference. First operand 11403 states and 21101 transitions. cyclomatic complexity: 9699 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:24,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:15:24,552 INFO L93 Difference]: Finished difference Result 36257 states and 67208 transitions. [2021-12-15 17:15:24,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:15:24,553 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 36257 states and 67208 transitions. [2021-12-15 17:15:24,704 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 30430 [2021-12-15 17:15:24,810 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 36257 states to 36257 states and 67208 transitions. [2021-12-15 17:15:24,810 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36257 [2021-12-15 17:15:24,839 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36257 [2021-12-15 17:15:24,839 INFO L73 IsDeterministic]: Start isDeterministic. Operand 36257 states and 67208 transitions. [2021-12-15 17:15:24,866 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:15:24,867 INFO L681 BuchiCegarLoop]: Abstraction has 36257 states and 67208 transitions. [2021-12-15 17:15:24,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36257 states and 67208 transitions. [2021-12-15 17:15:25,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36257 to 11437. [2021-12-15 17:15:25,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11437 states, 11437 states have (on average 1.8479496371426074) internal successors, (21135), 11436 states have internal predecessors, (21135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:15:25,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11437 states to 11437 states and 21135 transitions. [2021-12-15 17:15:25,267 INFO L704 BuchiCegarLoop]: Abstraction has 11437 states and 21135 transitions. [2021-12-15 17:15:25,268 INFO L587 BuchiCegarLoop]: Abstraction has 11437 states and 21135 transitions. [2021-12-15 17:15:25,268 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-15 17:15:25,268 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11437 states and 21135 transitions. [2021-12-15 17:15:25,299 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8342 [2021-12-15 17:15:25,299 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:15:25,299 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:15:25,300 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:25,300 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:15:25,300 INFO L791 eck$LassoCheckResult]: Stem: 310302#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 310303#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~4#1, main_~tmp~8#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 311601#L3298 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 309375#L3291 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 309376#L3306 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 311238#L1079 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 311239#L1049 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 309825#L2921 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 309826#L3110 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 310481#L3135 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 310482#L423 assume 0 == initPersonOnFloor_~floor#1; 310283#L424 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 309402#L531-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 309873#L215 assume !(0 == callOnFloor_~floorID#1); 310578#L218 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 310579#L227-2 assume { :end_inline_callOnFloor } true; 311648#L567 assume { :end_inline_initPersonOnFloor } true; 311647#L849 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 311646#L152 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 311645#L179 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 311644#L1934 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 309706#L1338 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 309707#L1359 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 311205#L1941 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 311477#L1946 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 311642#L2083 assume !(0 != timeShift_~tmp___9~2#1); 311203#L2174 assume !(1 == ~doorState~0); 311204#L2174-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 311388#L1525 assume !(1 == stopRequestedInDirection_~dir#1); 311216#L1694 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 309850#L1847 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 310500#L2182 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 310501#L1956 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 311531#L1961 timeShift_#t~ret59#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 311643#L1525-1 assume !(1 == stopRequestedInDirection_~dir#1); 309487#L1694-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 309470#L1847-1 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 310323#L2191 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 310648#L1901-2 assume !(1 == ~currentHeading~0); 310650#L1911-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 310768#L1911-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 311206#L1917-5 assume { :end_inline_continueInDirection } true; 310125#L2191-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 311696#L1321 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 311697#L1381-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 311683#L1413-6 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 311719#L2964 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~7#1;havoc areDoorsOpen_~retValue_acc~7#1;areDoorsOpen_~retValue_acc~7#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~7#1; 311671#L1330 __utac_acc__Specification9_spec__3_#t~ret113#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~8#1 := __utac_acc__Specification9_spec__3_#t~ret113#1;havoc __utac_acc__Specification9_spec__3_#t~ret113#1; 311674#L2974 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~8#1); 311667#L2974-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 311663#L2206 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 311662#L879-2 [2021-12-15 17:15:25,300 INFO L793 eck$LassoCheckResult]: Loop: 311662#L879-2 assume !false; 314231#L880 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 311656#L883 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 311657#L1167 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 314203#L887 assume 1 != cleanup_~tmp___0~0#1; 314201#L887-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret24#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~11#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~11#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_#t~ret21#1, anyStopRequested_#t~ret22#1, anyStopRequested_#t~ret23#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~10#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~10#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 314200#L152-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 314199#L179-21 anyStopRequested_#t~ret19#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret19#1;havoc anyStopRequested_#t~ret19#1; 314197#L1429 assume !(0 != anyStopRequested_~tmp___3~0#1); 314195#L1433 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 314194#L152-22 assume !(0 == isFloorCalling_~floorID#1); 310900#L156-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 310522#L179-22 anyStopRequested_#t~ret20#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret20#1;havoc anyStopRequested_#t~ret20#1; 311358#L1440 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 309956#L1493 isIdle_#t~ret24#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11#1 := isIdle_#t~ret24#1;havoc isIdle_#t~ret24#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~11#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 314127#L1506 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 314124#L899 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_#t~ret57#1, timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_~tmp~16#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1, stopRequestedAtCurrentFloor_#t~ret38#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 314121#L152-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 314119#L179-26 stopRequestedAtCurrentFloor_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret37#1;havoc stopRequestedAtCurrentFloor_#t~ret37#1; 314118#L1934-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 314117#L1338-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 314116#L1359-1 stopRequestedAtCurrentFloor_#t~ret38#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret38#1;havoc stopRequestedAtCurrentFloor_#t~ret38#1; 314114#L1941-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);stopRequestedAtCurrentFloor_~retValue_acc~15#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 314113#L1946-1 timeShift_#t~ret51#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret51#1;havoc timeShift_#t~ret51#1; 314111#L2083-2 assume !(0 != timeShift_~tmp___9~2#1); 314106#L2174-3 assume 1 == ~doorState~0;~doorState~0 := 0; 314105#L2174-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 313885#L1525-2 assume !(1 == stopRequestedInDirection_~dir#1); 313875#L1694-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 313838#L1847-2 timeShift_#t~ret58#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 313873#L2182-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~16#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~16#1; 313731#L1956-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~16#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~16#1; 313871#L1961-2 timeShift_#t~ret59#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret59#1;havoc timeShift_#t~ret59#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_#t~ret31#1, stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~12#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~12#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 313864#L1525-3 assume !(1 == stopRequestedInDirection_~dir#1); 313745#L1694-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~13#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 313732#L1847-3 timeShift_#t~ret60#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret60#1;havoc timeShift_#t~ret60#1; 313724#L2191-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret36#1, continueInDirection_~dir#1, continueInDirection_~tmp~13#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~13#1;~currentHeading~0 := continueInDirection_~dir#1; 313716#L1901-5 assume !(1 == ~currentHeading~0); 313707#L1911-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 313703#L1911-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313698#L1917-11 assume { :end_inline_continueInDirection } true; 313611#L2191-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret111#1, __utac_acc__Specification9_spec__3_#t~ret112#1, __utac_acc__Specification9_spec__3_#t~ret113#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~21#1, __utac_acc__Specification9_spec__3_~tmp___0~8#1, __utac_acc__Specification9_spec__3_~tmp___1~6#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~21#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~8#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 313609#L1321-1 __utac_acc__Specification9_spec__3_#t~ret111#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~21#1 := __utac_acc__Specification9_spec__3_#t~ret111#1;havoc __utac_acc__Specification9_spec__3_#t~ret111#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~21#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~10#1;havoc isEmpty_~retValue_acc~10#1; 313610#L1381-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~10#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~10#1; 313596#L1413-13 __utac_acc__Specification9_spec__3_#t~ret112#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~6#1 := __utac_acc__Specification9_spec__3_#t~ret112#1;havoc __utac_acc__Specification9_spec__3_#t~ret112#1; 313612#L2964-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~6#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~7#1;havoc areDoorsOpen_~retValue_acc~7#1;areDoorsOpen_~retValue_acc~7#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~7#1; 313586#L1330-1 __utac_acc__Specification9_spec__3_#t~ret113#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~8#1 := __utac_acc__Specification9_spec__3_#t~ret113#1;havoc __utac_acc__Specification9_spec__3_#t~ret113#1; 313589#L2974-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~8#1); 313580#L2974-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 311661#L2206-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 311662#L879-2 [2021-12-15 17:15:25,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:25,301 INFO L85 PathProgramCache]: Analyzing trace with hash -1354457946, now seen corresponding path program 1 times [2021-12-15 17:15:25,301 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:25,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225551000] [2021-12-15 17:15:25,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:25,301 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:25,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:15:25,325 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:15:25,325 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:15:25,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225551000] [2021-12-15 17:15:25,326 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225551000] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:15:25,326 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:15:25,326 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:15:25,326 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1674248990] [2021-12-15 17:15:25,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:15:25,326 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:15:25,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:15:25,327 INFO L85 PathProgramCache]: Analyzing trace with hash 369503987, now seen corresponding path program 1 times [2021-12-15 17:15:25,327 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:15:25,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [373953113] [2021-12-15 17:15:25,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:15:25,328 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:15:25,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:15:25,336 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:15:25,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:15:25,381 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:15:26,708 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer has thrown an exception: java.lang.UnsupportedOperationException: Set is immutable at de.uni_freiburg.informatik.ultimate.util.datastructures.ImmutableSet.retainAll(ImmutableSet.java:338) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.UnmodifiableTransFormula.removeSuperfluousVars(UnmodifiableTransFormula.java:212) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaBuilder.finishConstruction(TransFormulaBuilder.java:273) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaBuilder.getTrivialTransFormula(TransFormulaBuilder.java:285) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck.synthesize(LassoCheck.java:548) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck$LassoCheckResult.checkLoopTermination(LassoCheck.java:944) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck$LassoCheckResult.(LassoCheck.java:818) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck.(LassoCheck.java:252) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiCegarLoop.iterate(BuchiCegarLoop.java:457) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.doTerminationAnalysis(BuchiAutomizerObserver.java:142) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.finish(BuchiAutomizerObserver.java:397) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2021-12-15 17:15:26,713 INFO L158 Benchmark]: Toolchain (without parser) took 21504.10ms. Allocated memory was 102.8MB in the beginning and 3.6GB in the end (delta: 3.5GB). Free memory was 69.8MB in the beginning and 3.0GB in the end (delta: -3.0GB). Peak memory consumption was 637.6MB. Max. memory is 16.1GB. [2021-12-15 17:15:26,713 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 73.4MB. Free memory is still 40.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-15 17:15:26,714 INFO L158 Benchmark]: CACSL2BoogieTranslator took 556.41ms. Allocated memory is still 102.8MB. Free memory was 69.5MB in the beginning and 65.1MB in the end (delta: 4.4MB). Peak memory consumption was 31.6MB. Max. memory is 16.1GB. [2021-12-15 17:15:26,714 INFO L158 Benchmark]: Boogie Procedure Inliner took 186.43ms. Allocated memory is still 102.8MB. Free memory was 65.1MB in the beginning and 43.5MB in the end (delta: 21.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-12-15 17:15:26,714 INFO L158 Benchmark]: Boogie Preprocessor took 185.84ms. Allocated memory is still 102.8MB. Free memory was 43.5MB in the beginning and 53.6MB in the end (delta: -10.1MB). Peak memory consumption was 12.3MB. Max. memory is 16.1GB. [2021-12-15 17:15:26,715 INFO L158 Benchmark]: RCFGBuilder took 3098.29ms. Allocated memory was 102.8MB in the beginning and 216.0MB in the end (delta: 113.2MB). Free memory was 53.6MB in the beginning and 144.1MB in the end (delta: -90.5MB). Peak memory consumption was 72.5MB. Max. memory is 16.1GB. [2021-12-15 17:15:26,715 INFO L158 Benchmark]: BuchiAutomizer took 17469.45ms. Allocated memory was 216.0MB in the beginning and 3.6GB in the end (delta: 3.4GB). Free memory was 144.1MB in the beginning and 3.0GB in the end (delta: -2.9GB). Peak memory consumption was 597.8MB. Max. memory is 16.1GB. [2021-12-15 17:15:26,717 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 73.4MB. Free memory is still 40.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 556.41ms. Allocated memory is still 102.8MB. Free memory was 69.5MB in the beginning and 65.1MB in the end (delta: 4.4MB). Peak memory consumption was 31.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 186.43ms. Allocated memory is still 102.8MB. Free memory was 65.1MB in the beginning and 43.5MB in the end (delta: 21.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 185.84ms. Allocated memory is still 102.8MB. Free memory was 43.5MB in the beginning and 53.6MB in the end (delta: -10.1MB). Peak memory consumption was 12.3MB. Max. memory is 16.1GB. * RCFGBuilder took 3098.29ms. Allocated memory was 102.8MB in the beginning and 216.0MB in the end (delta: 113.2MB). Free memory was 53.6MB in the beginning and 144.1MB in the end (delta: -90.5MB). Peak memory consumption was 72.5MB. Max. memory is 16.1GB. * BuchiAutomizer took 17469.45ms. Allocated memory was 216.0MB in the beginning and 3.6GB in the end (delta: 3.4GB). Free memory was 144.1MB in the beginning and 3.0GB in the end (delta: -2.9GB). Peak memory consumption was 597.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: - ExceptionOrErrorResult: UnsupportedOperationException: Set is immutable de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: UnsupportedOperationException: Set is immutable: de.uni_freiburg.informatik.ultimate.util.datastructures.ImmutableSet.retainAll(ImmutableSet.java:338) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2021-12-15 17:15:26,747 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis No suitable file found in config dir /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config using search string *Termination*32bit*_Bitvector*.epf No suitable settings file found using Termination*32bit*_Bitvector ERROR: UNSUPPORTED PROPERTY Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: UnsupportedOperationException: Set is immutable