./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 9ad7fb26 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2e77838346608929bef5ad1e655ea0710d74ebb9f10b29169ab985d305812d92 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-9ad7fb2 [2021-11-02 22:15:42,452 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-02 22:15:42,455 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-02 22:15:42,520 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-02 22:15:42,521 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-02 22:15:42,522 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-02 22:15:42,524 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-02 22:15:42,527 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-02 22:15:42,529 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-02 22:15:42,531 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-02 22:15:42,532 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-02 22:15:42,534 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-02 22:15:42,534 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-02 22:15:42,536 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-02 22:15:42,538 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-02 22:15:42,540 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-02 22:15:42,541 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-02 22:15:42,542 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-02 22:15:42,545 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-02 22:15:42,548 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-02 22:15:42,550 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-02 22:15:42,560 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-02 22:15:42,561 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-02 22:15:42,563 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-02 22:15:42,567 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-02 22:15:42,567 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-02 22:15:42,568 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-02 22:15:42,569 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-02 22:15:42,570 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-02 22:15:42,571 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-02 22:15:42,571 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-02 22:15:42,572 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-02 22:15:42,573 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-02 22:15:42,582 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-02 22:15:42,589 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-02 22:15:42,589 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-02 22:15:42,590 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-02 22:15:42,590 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-02 22:15:42,591 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-02 22:15:42,592 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-02 22:15:42,592 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-02 22:15:42,593 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-02 22:15:42,648 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-02 22:15:42,648 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-02 22:15:42,649 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-02 22:15:42,650 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-02 22:15:42,651 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-02 22:15:42,651 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-02 22:15:42,651 INFO L138 SettingsManager]: * Use SBE=true [2021-11-02 22:15:42,652 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-02 22:15:42,652 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-02 22:15:42,652 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-02 22:15:42,654 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-02 22:15:42,654 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-02 22:15:42,654 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-02 22:15:42,654 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-02 22:15:42,655 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-02 22:15:42,655 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-02 22:15:42,655 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-02 22:15:42,655 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-02 22:15:42,656 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-02 22:15:42,656 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-02 22:15:42,656 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-02 22:15:42,656 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-02 22:15:42,657 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-02 22:15:42,657 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-02 22:15:42,657 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-02 22:15:42,657 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-02 22:15:42,658 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-02 22:15:42,658 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-02 22:15:42,658 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-02 22:15:42,658 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-02 22:15:42,659 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-02 22:15:42,659 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-02 22:15:42,660 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-02 22:15:42,660 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2e77838346608929bef5ad1e655ea0710d74ebb9f10b29169ab985d305812d92 [2021-11-02 22:15:43,019 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-02 22:15:43,058 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-02 22:15:43,061 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-02 22:15:43,062 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-02 22:15:43,064 INFO L275 PluginConnector]: CDTParser initialized [2021-11-02 22:15:43,065 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/../../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c [2021-11-02 22:15:43,170 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/data/4c5b797c2/bec3c58957d343b6bf2fcf21916b946c/FLAG94a4da94c [2021-11-02 22:15:43,844 INFO L306 CDTParser]: Found 1 translation units. [2021-11-02 22:15:43,851 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c [2021-11-02 22:15:43,875 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/data/4c5b797c2/bec3c58957d343b6bf2fcf21916b946c/FLAG94a4da94c [2021-11-02 22:15:44,059 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/data/4c5b797c2/bec3c58957d343b6bf2fcf21916b946c [2021-11-02 22:15:44,062 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-02 22:15:44,067 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-02 22:15:44,070 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-02 22:15:44,070 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-02 22:15:44,074 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-02 22:15:44,075 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:15:44" (1/1) ... [2021-11-02 22:15:44,077 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7a8ea79a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:44, skipping insertion in model container [2021-11-02 22:15:44,077 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:15:44" (1/1) ... [2021-11-02 22:15:44,086 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-02 22:15:44,189 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-02 22:15:44,412 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c[1546,1559] [2021-11-02 22:15:44,828 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:15:44,847 INFO L203 MainTranslator]: Completed pre-run [2021-11-02 22:15:44,867 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c[1546,1559] [2021-11-02 22:15:44,981 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:15:45,018 INFO L208 MainTranslator]: Completed translation [2021-11-02 22:15:45,018 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45 WrapperNode [2021-11-02 22:15:45,018 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-02 22:15:45,020 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-02 22:15:45,020 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-02 22:15:45,020 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-02 22:15:45,028 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:45,079 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:45,704 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-02 22:15:45,705 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-02 22:15:45,706 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-02 22:15:45,706 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-02 22:15:45,717 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:45,717 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:45,880 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:45,880 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:46,360 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:46,738 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:46,772 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:46,998 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-02 22:15:46,999 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-02 22:15:46,999 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-02 22:15:46,999 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-02 22:15:47,001 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (1/1) ... [2021-11-02 22:15:47,025 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:15:47,038 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:15:47,051 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:15:47,070 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-02 22:15:47,151 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-02 22:15:47,151 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-02 22:15:47,151 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-02 22:15:47,151 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-02 22:16:02,672 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-02 22:16:02,673 INFO L299 CfgBuilder]: Removed 2191 assume(true) statements. [2021-11-02 22:16:02,683 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:16:02 BoogieIcfgContainer [2021-11-02 22:16:02,684 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-02 22:16:02,685 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-02 22:16:02,685 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-02 22:16:02,688 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-02 22:16:02,689 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:16:02,690 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 10:15:44" (1/3) ... [2021-11-02 22:16:02,691 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6a826883 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:16:02, skipping insertion in model container [2021-11-02 22:16:02,691 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:16:02,692 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:15:45" (2/3) ... [2021-11-02 22:16:02,692 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6a826883 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:16:02, skipping insertion in model container [2021-11-02 22:16:02,692 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:16:02,692 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:16:02" (3/3) ... [2021-11-02 22:16:02,694 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product31.cil.c [2021-11-02 22:16:02,756 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-02 22:16:02,756 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-02 22:16:02,756 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-02 22:16:02,757 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-02 22:16:02,757 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-02 22:16:02,757 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-02 22:16:02,757 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-02 22:16:02,757 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-02 22:16:02,949 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9586 states, 9585 states have (on average 1.886697965571205) internal successors, (18084), 9585 states have internal predecessors, (18084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:03,144 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2405 [2021-11-02 22:16:03,144 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:03,145 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:03,155 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:03,155 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:03,155 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-02 22:16:03,183 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9586 states, 9585 states have (on average 1.886697965571205) internal successors, (18084), 9585 states have internal predecessors, (18084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:03,317 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2405 [2021-11-02 22:16:03,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:03,317 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:03,320 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:03,320 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:03,327 INFO L791 eck$LassoCheckResult]: Stem: 7787#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4596#L-1true havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 8599#L1702true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6032#L1710true main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 2873#L1651true assume 0 != main_~tmp~12; 6091#L1624true havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 5349#L564true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 5490#L589true aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1150#L999true assume 0 == initPersonOnFloor_~floor; 4511#L1000true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7732#L1107-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 322#L791true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1170#L803-2true havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 4945#L564-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 7908#L589-1true angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3768#L999-1true assume 0 == initPersonOnFloor_~floor; 9315#L1000-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3327#L1107-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8242#L791-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8094#L803-5true havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3458#L2015true __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 462#L436true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 9047#L728true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 593#L755true isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 3091#L3316true stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 4799#L2700true assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2946#L1963true stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 2663#L2704true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 850#L2717true timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 576#L2853true assume !(0 != timeShift_~tmp___9~2); 3110#L2944true assume !(1 == ~doorState~0); 882#L2944-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 8342#L728-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 8464#L755-3true isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 2710#L3316-1true stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 403#L2555true assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4847#L1963-3true stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 288#L2568true timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 208#L2952true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 8677#L2612true assume !(1 == ~currentHeading~0); 2596#L2622true assume !(0 == ~currentFloorID~0); 3776#L2622-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7163#L2628-5true havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 1783#L454true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 1024#L455true assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 2095#L3156true assume 1 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i~1 := 0;existInLiftCallsInDirection_~i~1 := 1 + ~currentFloorID~0; 5183#L3160-2true [2021-11-02 22:16:03,328 INFO L793 eck$LassoCheckResult]: Loop: 5183#L3160-2true assume !false; 3424#L3161true assume existInLiftCallsInDirection_~i~1 < 5; 5#L3162true assume !(0 == existInLiftCallsInDirection_~i~1); 3663#L3175true assume !(1 == existInLiftCallsInDirection_~i~1); 4544#L3184true assume !(2 == existInLiftCallsInDirection_~i~1); 3093#L3193true assume !(3 == existInLiftCallsInDirection_~i~1); 5173#L3202true assume !(4 == existInLiftCallsInDirection_~i~1); 1606#L3203-1true existInLiftCallsInDirection_~i~1 := 1 + existInLiftCallsInDirection_~i~1; 5183#L3160-2true [2021-11-02 22:16:03,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:03,335 INFO L85 PathProgramCache]: Analyzing trace with hash -980619611, now seen corresponding path program 1 times [2021-11-02 22:16:03,344 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:03,345 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [571599427] [2021-11-02 22:16:03,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:03,347 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:03,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:03,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:03,746 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:03,747 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [571599427] [2021-11-02 22:16:03,748 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [571599427] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:03,749 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:03,749 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:16:03,752 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [805698427] [2021-11-02 22:16:03,769 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:03,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:03,774 INFO L85 PathProgramCache]: Analyzing trace with hash -1925680515, now seen corresponding path program 1 times [2021-11-02 22:16:03,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:03,775 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69665193] [2021-11-02 22:16:03,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:03,776 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:03,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:03,787 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:03,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:03,846 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:03,921 INFO L210 LassoAnalysis]: Preferences: [2021-11-02 22:16:03,922 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-11-02 22:16:03,922 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-11-02 22:16:03,922 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-11-02 22:16:03,922 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-11-02 22:16:03,923 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:03,923 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-11-02 22:16:03,923 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-11-02 22:16:03,923 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration1_Loop [2021-11-02 22:16:03,923 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-11-02 22:16:03,924 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-11-02 22:16:03,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-02 22:16:04,010 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-11-02 22:16:04,011 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-11-02 22:16:04,014 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:04,014 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:04,018 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:04,022 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-11-02 22:16:04,023 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-02 22:16:04,027 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-02 22:16:04,090 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:04,090 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:04,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:04,095 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:04,107 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-11-02 22:16:04,110 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-11-02 22:16:04,110 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-02 22:16:04,187 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-11-02 22:16:04,194 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:04,195 INFO L210 LassoAnalysis]: Preferences: [2021-11-02 22:16:04,195 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-11-02 22:16:04,195 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-11-02 22:16:04,195 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-11-02 22:16:04,196 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-11-02 22:16:04,196 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:04,196 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-11-02 22:16:04,196 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-11-02 22:16:04,196 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration1_Loop [2021-11-02 22:16:04,196 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-11-02 22:16:04,196 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-11-02 22:16:04,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-02 22:16:04,253 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-11-02 22:16:04,258 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-11-02 22:16:04,259 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:04,259 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:04,260 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:04,271 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-02 22:16:04,282 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-02 22:16:04,282 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-02 22:16:04,283 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-02 22:16:04,283 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-02 22:16:04,283 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-02 22:16:04,287 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-02 22:16:04,288 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-02 22:16:04,291 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-11-02 22:16:04,306 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-11-02 22:16:04,332 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-11-02 22:16:04,332 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-11-02 22:16:04,334 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:04,334 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:04,350 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:04,369 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-11-02 22:16:04,369 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-11-02 22:16:04,370 INFO L513 LassoAnalysis]: Proved termination. [2021-11-02 22:16:04,370 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~1 Supporting invariants [] [2021-11-02 22:16:04,393 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-11-02 22:16:04,410 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:04,413 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-11-02 22:16:04,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:04,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:04,750 INFO L263 TraceCheckSpWp]: Trace formula consists of 686 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-02 22:16:04,754 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-02 22:16:04,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:04,976 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-02 22:16:04,977 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-02 22:16:05,240 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:05,258 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-11-02 22:16:05,305 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9586 states, 9585 states have (on average 1.886697965571205) internal successors, (18084), 9585 states have internal predecessors, (18084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.0) internal successors, (54), 9 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:06,131 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2021-11-02 22:16:13,549 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9586 states, 9585 states have (on average 1.886697965571205) internal successors, (18084), 9585 states have internal predecessors, (18084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.0) internal successors, (54), 9 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 109348 states and 206096 transitions. Complement of second has 18 states. [2021-11-02 22:16:13,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-11-02 22:16:13,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.0) internal successors, (54), 9 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:13,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 112105 transitions. [2021-11-02 22:16:13,723 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112105 transitions. Stem has 46 letters. Loop has 8 letters. [2021-11-02 22:16:13,725 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-02 22:16:13,726 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112105 transitions. Stem has 54 letters. Loop has 8 letters. [2021-11-02 22:16:13,727 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-02 22:16:13,727 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112105 transitions. Stem has 46 letters. Loop has 16 letters. [2021-11-02 22:16:13,728 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-02 22:16:13,729 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109348 states and 206096 transitions. [2021-11-02 22:16:14,611 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15406 [2021-11-02 22:16:15,514 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109348 states to 59385 states and 111853 transitions. [2021-11-02 22:16:15,516 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59355 [2021-11-02 22:16:15,604 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59356 [2021-11-02 22:16:15,605 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59385 states and 111853 transitions. [2021-11-02 22:16:15,609 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:15,609 INFO L681 BuchiCegarLoop]: Abstraction has 59385 states and 111853 transitions. [2021-11-02 22:16:15,700 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59385 states and 111853 transitions. [2021-11-02 22:16:16,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59385 to 17240. [2021-11-02 22:16:16,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17240 states, 17240 states have (on average 1.8786542923433875) internal successors, (32388), 17239 states have internal predecessors, (32388), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:16,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17240 states to 17240 states and 32388 transitions. [2021-11-02 22:16:16,534 INFO L704 BuchiCegarLoop]: Abstraction has 17240 states and 32388 transitions. [2021-11-02 22:16:16,535 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:16,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:16:16,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:16:16,542 INFO L87 Difference]: Start difference. First operand 17240 states and 32388 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:17,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:17,422 INFO L93 Difference]: Finished difference Result 24924 states and 46661 transitions. [2021-11-02 22:16:17,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:17,423 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24924 states and 46661 transitions. [2021-11-02 22:16:17,558 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 8806 [2021-11-02 22:16:17,682 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24924 states to 24911 states and 46648 transitions. [2021-11-02 22:16:17,683 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24892 [2021-11-02 22:16:17,724 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24892 [2021-11-02 22:16:17,724 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24911 states and 46648 transitions. [2021-11-02 22:16:17,726 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:17,727 INFO L681 BuchiCegarLoop]: Abstraction has 24911 states and 46648 transitions. [2021-11-02 22:16:17,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24911 states and 46648 transitions. [2021-11-02 22:16:17,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24911 to 9596. [2021-11-02 22:16:17,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9596 states, 9596 states have (on average 1.872759483117966) internal successors, (17971), 9595 states have internal predecessors, (17971), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:18,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9596 states to 9596 states and 17971 transitions. [2021-11-02 22:16:18,262 INFO L704 BuchiCegarLoop]: Abstraction has 9596 states and 17971 transitions. [2021-11-02 22:16:18,262 INFO L587 BuchiCegarLoop]: Abstraction has 9596 states and 17971 transitions. [2021-11-02 22:16:18,264 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-02 22:16:18,264 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9596 states and 17971 transitions. [2021-11-02 22:16:18,300 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2407 [2021-11-02 22:16:18,301 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:18,301 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:18,303 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:18,303 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:18,304 INFO L791 eck$LassoCheckResult]: Stem: 170637#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 168670#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 168671#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 169806#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 166678#L1651 assume 0 != main_~tmp~12; 166679#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 169302#L564 assume !(0 == getOrigin_~person); 163326#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 161315#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 163910#L999 assume 0 == initPersonOnFloor_~floor; 163912#L1000 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 163724#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 162143#L791 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 161944#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 163947#L564-1 assume !(0 == getOrigin_~person); 164412#L568-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 164413#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167797#L999-1 assume 0 == initPersonOnFloor_~floor; 167798#L1000-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 161463#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 167298#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 163557#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 167438#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 162468#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 162469#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 162756#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 162757#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 166987#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 166792#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 166382#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 163309#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 162714#L2853 assume !(0 != timeShift_~tmp___9~2); 162716#L2944 assume !(1 == ~doorState~0); 163377#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 163378#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 163673#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 166445#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 162328#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 162329#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 162060#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 161866#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 161868#L2612 assume !(1 == ~currentHeading~0); 166295#L2622 assume !(0 == ~currentFloorID~0); 166296#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 166744#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 165057#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 163668#L455 assume !(1 == ~prevDir~0); 163669#L481 assume 0 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 1;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 165352#L3156-2 assume 1 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i~1 := 0;existInLiftCallsInDirection_~i~1 := 1 + ~currentFloorID~0; 165354#L3160-8 [2021-11-02 22:16:18,305 INFO L793 eck$LassoCheckResult]: Loop: 165354#L3160-8 assume !false; 166111#L3161-2 assume existInLiftCallsInDirection_~i~1 < 5; 166112#L3162-2 assume !(0 == existInLiftCallsInDirection_~i~1); 164062#L3175-2 assume !(1 == existInLiftCallsInDirection_~i~1); 162709#L3184-2 assume !(2 == existInLiftCallsInDirection_~i~1); 162711#L3193-2 assume !(3 == existInLiftCallsInDirection_~i~1); 169433#L3202-2 assume !(4 == existInLiftCallsInDirection_~i~1); 170545#L3203-5 existInLiftCallsInDirection_~i~1 := 1 + existInLiftCallsInDirection_~i~1; 165354#L3160-8 [2021-11-02 22:16:18,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:18,306 INFO L85 PathProgramCache]: Analyzing trace with hash 1053006905, now seen corresponding path program 1 times [2021-11-02 22:16:18,307 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:18,307 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2096769364] [2021-11-02 22:16:18,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:18,308 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:18,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:18,492 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:18,493 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:18,493 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2096769364] [2021-11-02 22:16:18,493 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2096769364] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:18,494 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:18,494 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:16:18,494 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821517586] [2021-11-02 22:16:18,495 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:18,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:18,495 INFO L85 PathProgramCache]: Analyzing trace with hash 1786628349, now seen corresponding path program 1 times [2021-11-02 22:16:18,496 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:18,496 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2079128922] [2021-11-02 22:16:18,496 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:18,496 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:18,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:18,503 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:18,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:18,514 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:18,567 INFO L210 LassoAnalysis]: Preferences: [2021-11-02 22:16:18,567 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-11-02 22:16:18,568 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-11-02 22:16:18,568 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-11-02 22:16:18,568 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-11-02 22:16:18,568 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:18,568 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-11-02 22:16:18,568 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-11-02 22:16:18,569 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration2_Loop [2021-11-02 22:16:18,569 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-11-02 22:16:18,569 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-11-02 22:16:18,570 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-02 22:16:18,636 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-11-02 22:16:18,636 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-11-02 22:16:18,637 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:18,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:18,643 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:18,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-11-02 22:16:18,644 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-11-02 22:16:18,645 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-02 22:16:18,702 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:18,706 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:18,706 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:18,708 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:18,713 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-11-02 22:16:18,714 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-11-02 22:16:18,714 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-11-02 22:16:18,787 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-11-02 22:16:18,790 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:18,790 INFO L210 LassoAnalysis]: Preferences: [2021-11-02 22:16:18,791 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-11-02 22:16:18,791 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-11-02 22:16:18,791 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-11-02 22:16:18,791 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-11-02 22:16:18,791 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:18,791 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-11-02 22:16:18,791 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-11-02 22:16:18,791 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration2_Loop [2021-11-02 22:16:18,791 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-11-02 22:16:18,791 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-11-02 22:16:18,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-11-02 22:16:18,848 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-11-02 22:16:18,848 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-11-02 22:16:18,849 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:18,849 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:18,851 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:18,853 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-11-02 22:16:18,863 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-11-02 22:16:18,863 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-11-02 22:16:18,863 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-11-02 22:16:18,863 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-11-02 22:16:18,863 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-11-02 22:16:18,864 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-11-02 22:16:18,865 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-11-02 22:16:18,867 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-11-02 22:16:18,867 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-11-02 22:16:18,888 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-11-02 22:16:18,888 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-11-02 22:16:18,889 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:16:18,889 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:16:18,891 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:16:18,897 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-11-02 22:16:18,897 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-11-02 22:16:18,897 INFO L513 LassoAnalysis]: Proved termination. [2021-11-02 22:16:18,897 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~1 Supporting invariants [] [2021-11-02 22:16:18,914 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-11-02 22:16:18,931 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:18,931 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-11-02 22:16:18,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:19,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:19,086 INFO L263 TraceCheckSpWp]: Trace formula consists of 689 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-02 22:16:19,089 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-02 22:16:19,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:19,259 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-02 22:16:19,260 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-02 22:16:19,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:19,479 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-11-02 22:16:19,479 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9596 states and 17971 transitions. cyclomatic complexity: 8409 Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:19,926 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b8194c68-d814-4b51-9976-32edbf9ed921/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2021-11-02 22:16:24,113 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9596 states and 17971 transitions. cyclomatic complexity: 8409. Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 101528 states and 191157 transitions. Complement of second has 17 states. [2021-11-02 22:16:24,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-11-02 22:16:24,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:24,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 97340 transitions. [2021-11-02 22:16:24,189 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 97340 transitions. Stem has 49 letters. Loop has 8 letters. [2021-11-02 22:16:24,190 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-02 22:16:24,190 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 97340 transitions. Stem has 57 letters. Loop has 8 letters. [2021-11-02 22:16:24,191 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-02 22:16:24,191 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 97340 transitions. Stem has 49 letters. Loop has 16 letters. [2021-11-02 22:16:24,191 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-11-02 22:16:24,192 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 101528 states and 191157 transitions. [2021-11-02 22:16:24,752 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15408 [2021-11-02 22:16:25,098 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 101528 states to 59400 states and 111769 transitions. [2021-11-02 22:16:25,098 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59351 [2021-11-02 22:16:25,177 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59352 [2021-11-02 22:16:25,177 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59400 states and 111769 transitions. [2021-11-02 22:16:25,189 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:25,189 INFO L681 BuchiCegarLoop]: Abstraction has 59400 states and 111769 transitions. [2021-11-02 22:16:25,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59400 states and 111769 transitions. [2021-11-02 22:16:25,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59400 to 9620. [2021-11-02 22:16:25,617 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9620 states, 9620 states have (on average 1.872037422037422) internal successors, (18009), 9619 states have internal predecessors, (18009), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:25,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9620 states to 9620 states and 18009 transitions. [2021-11-02 22:16:25,646 INFO L704 BuchiCegarLoop]: Abstraction has 9620 states and 18009 transitions. [2021-11-02 22:16:25,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:25,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:16:25,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:16:25,647 INFO L87 Difference]: Start difference. First operand 9620 states and 18009 transitions. Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:26,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:26,815 INFO L93 Difference]: Finished difference Result 28645 states and 53599 transitions. [2021-11-02 22:16:26,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:26,816 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28645 states and 53599 transitions. [2021-11-02 22:16:26,937 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7233 [2021-11-02 22:16:27,074 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28645 states to 28645 states and 53599 transitions. [2021-11-02 22:16:27,075 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28531 [2021-11-02 22:16:27,101 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28531 [2021-11-02 22:16:27,101 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28645 states and 53599 transitions. [2021-11-02 22:16:27,104 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:27,104 INFO L681 BuchiCegarLoop]: Abstraction has 28645 states and 53599 transitions. [2021-11-02 22:16:27,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28645 states and 53599 transitions. [2021-11-02 22:16:27,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28645 to 9635. [2021-11-02 22:16:27,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9635 states, 9635 states have (on average 1.8706798131811104) internal successors, (18024), 9634 states have internal predecessors, (18024), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:27,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9635 states to 9635 states and 18024 transitions. [2021-11-02 22:16:27,364 INFO L704 BuchiCegarLoop]: Abstraction has 9635 states and 18024 transitions. [2021-11-02 22:16:27,364 INFO L587 BuchiCegarLoop]: Abstraction has 9635 states and 18024 transitions. [2021-11-02 22:16:27,364 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-02 22:16:27,365 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9635 states and 18024 transitions. [2021-11-02 22:16:27,400 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:27,400 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:27,400 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:27,402 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:27,402 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:27,402 INFO L791 eck$LassoCheckResult]: Stem: 320259#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 318290#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 318291#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 319428#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 316294#L1651 assume 0 != main_~tmp~12; 316295#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 318921#L564 assume !(0 == getOrigin_~person); 312935#L568 assume !(1 == getOrigin_~person); 312937#L572 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 310921#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 320535#L999 assume 0 == initPersonOnFloor_~floor; 318193#L1000 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 313334#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 311749#L791 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 311550#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 313556#L564-1 assume !(0 == getOrigin_~person); 314023#L568-1 assume !(1 == getOrigin_~person); 314025#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 316170#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 320536#L999-1 assume 0 == initPersonOnFloor_~floor; 320523#L1000-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 311069#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 316914#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 313167#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 317054#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 312074#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 312075#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 312365#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 312366#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 316603#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 316408#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 315997#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 312918#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 312323#L2853 assume !(0 != timeShift_~tmp___9~2); 312325#L2944 assume !(1 == ~doorState~0); 312987#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 312988#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 313283#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 316060#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 311934#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 311935#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 311666#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 311472#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 311474#L2612 assume !(1 == ~currentHeading~0); 315910#L2622 assume !(0 == ~currentFloorID~0); 315911#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 316360#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 314669#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 313278#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 313280#L3156 assume !(1 == existInLiftCallsInDirection_~d); 315153#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 314708#L3226-2 [2021-11-02 22:16:27,403 INFO L793 eck$LassoCheckResult]: Loop: 314708#L3226-2 assume !false; 315467#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 315468#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 311188#L3235-2 assume !false; 311189#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 314587#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 314708#L3226-2 [2021-11-02 22:16:27,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:27,404 INFO L85 PathProgramCache]: Analyzing trace with hash -1502765315, now seen corresponding path program 1 times [2021-11-02 22:16:27,404 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:27,404 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [475474094] [2021-11-02 22:16:27,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:27,405 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:27,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:27,544 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:27,545 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:27,545 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [475474094] [2021-11-02 22:16:27,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [475474094] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:27,546 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:27,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:16:27,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990582120] [2021-11-02 22:16:27,547 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:27,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:27,547 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 1 times [2021-11-02 22:16:27,550 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:27,550 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228043613] [2021-11-02 22:16:27,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:27,551 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:27,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:27,558 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:27,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:27,567 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:27,603 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:27,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:16:27,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:16:27,606 INFO L87 Difference]: Start difference. First operand 9635 states and 18024 transitions. cyclomatic complexity: 8424 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:27,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:27,886 INFO L93 Difference]: Finished difference Result 19094 states and 35724 transitions. [2021-11-02 22:16:27,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:16:27,887 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19094 states and 35724 transitions. [2021-11-02 22:16:28,186 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4822 [2021-11-02 22:16:28,253 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19094 states to 19094 states and 35724 transitions. [2021-11-02 22:16:28,253 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19018 [2021-11-02 22:16:28,270 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19018 [2021-11-02 22:16:28,271 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19094 states and 35724 transitions. [2021-11-02 22:16:28,293 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:28,293 INFO L681 BuchiCegarLoop]: Abstraction has 19094 states and 35724 transitions. [2021-11-02 22:16:28,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19094 states and 35724 transitions. [2021-11-02 22:16:28,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19094 to 9601. [2021-11-02 22:16:28,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9601 states, 9601 states have (on average 1.870221851890428) internal successors, (17956), 9600 states have internal predecessors, (17956), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:28,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9601 states to 9601 states and 17956 transitions. [2021-11-02 22:16:28,493 INFO L704 BuchiCegarLoop]: Abstraction has 9601 states and 17956 transitions. [2021-11-02 22:16:28,493 INFO L587 BuchiCegarLoop]: Abstraction has 9601 states and 17956 transitions. [2021-11-02 22:16:28,494 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-02 22:16:28,494 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9601 states and 17956 transitions. [2021-11-02 22:16:28,528 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:28,528 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:28,529 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:28,532 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:28,532 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:28,533 INFO L791 eck$LassoCheckResult]: Stem: 348966#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 346998#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 346999#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 348134#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 345009#L1651 assume 0 != main_~tmp~12; 345010#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 347627#L564 assume !(0 == getOrigin_~person); 341667#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 341668#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 342252#L999 assume !(0 == initPersonOnFloor_~floor); 342253#L1026 assume !(1 == initPersonOnFloor_~floor); 348014#L1053 assume !(2 == initPersonOnFloor_~floor); 348508#L1080 assume 3 == initPersonOnFloor_~floor; 345725#L1081 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_3~0 := 1; 343581#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 340481#L791 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 340282#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 342287#L564-1 assume !(0 == getOrigin_~person); 342751#L568-1 assume !(1 == getOrigin_~person); 342753#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 344886#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 349238#L999-1 assume 0 == initPersonOnFloor_~floor; 349229#L1000-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 339804#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 345630#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 341898#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 345768#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 340806#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 340807#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 341097#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 341098#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 345317#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 345122#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 344713#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 341650#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 341055#L2853 assume !(0 != timeShift_~tmp___9~2); 341057#L2944 assume !(1 == ~doorState~0); 341718#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 341719#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 342019#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 344777#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 340666#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 340667#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 340398#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 340207#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 340209#L2612 assume !(1 == ~currentHeading~0); 344628#L2622 assume !(0 == ~currentFloorID~0); 344629#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 345074#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 343390#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 342010#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 342012#L3156 assume !(1 == existInLiftCallsInDirection_~d); 343875#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 343429#L3226-2 [2021-11-02 22:16:28,533 INFO L793 eck$LassoCheckResult]: Loop: 343429#L3226-2 assume !false; 344192#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 344193#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 339920#L3235-2 assume !false; 339921#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 343308#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 343429#L3226-2 [2021-11-02 22:16:28,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:28,534 INFO L85 PathProgramCache]: Analyzing trace with hash 1120869578, now seen corresponding path program 1 times [2021-11-02 22:16:28,534 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:28,535 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1177289526] [2021-11-02 22:16:28,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:28,536 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:28,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:28,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:28,656 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:28,657 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1177289526] [2021-11-02 22:16:28,658 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1177289526] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:28,658 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:28,658 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:16:28,658 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309918077] [2021-11-02 22:16:28,659 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:28,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:28,659 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 2 times [2021-11-02 22:16:28,659 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:28,660 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769041359] [2021-11-02 22:16:28,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:28,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:28,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:28,668 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:28,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:28,678 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:28,707 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:28,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:16:28,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:16:28,709 INFO L87 Difference]: Start difference. First operand 9601 states and 17956 transitions. cyclomatic complexity: 8390 Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 5 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:29,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:29,236 INFO L93 Difference]: Finished difference Result 13405 states and 25070 transitions. [2021-11-02 22:16:29,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:29,237 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13405 states and 25070 transitions. [2021-11-02 22:16:29,293 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4454 [2021-11-02 22:16:29,347 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13405 states to 13405 states and 25070 transitions. [2021-11-02 22:16:29,347 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13367 [2021-11-02 22:16:29,361 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13367 [2021-11-02 22:16:29,361 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13405 states and 25070 transitions. [2021-11-02 22:16:29,367 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:29,367 INFO L681 BuchiCegarLoop]: Abstraction has 13405 states and 25070 transitions. [2021-11-02 22:16:29,386 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13405 states and 25070 transitions. [2021-11-02 22:16:29,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13405 to 9601. [2021-11-02 22:16:29,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9601 states, 9601 states have (on average 1.8695969169878137) internal successors, (17950), 9600 states have internal predecessors, (17950), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:29,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9601 states to 9601 states and 17950 transitions. [2021-11-02 22:16:29,745 INFO L704 BuchiCegarLoop]: Abstraction has 9601 states and 17950 transitions. [2021-11-02 22:16:29,746 INFO L587 BuchiCegarLoop]: Abstraction has 9601 states and 17950 transitions. [2021-11-02 22:16:29,746 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-02 22:16:29,746 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9601 states and 17950 transitions. [2021-11-02 22:16:29,786 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:29,787 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:29,787 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:29,788 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:29,788 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:29,789 INFO L791 eck$LassoCheckResult]: Stem: 371986#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 370017#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 370018#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 371154#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 368028#L1651 assume 0 != main_~tmp~12; 368029#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 370648#L564 assume !(0 == getOrigin_~person); 364686#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 364687#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 365268#L999 assume !(0 == initPersonOnFloor_~floor); 365269#L1026 assume !(1 == initPersonOnFloor_~floor); 371035#L1053 assume !(2 == initPersonOnFloor_~floor); 371528#L1080 assume 3 == initPersonOnFloor_~floor; 368744#L1081 assume !(0 == initPersonOnFloor_~person); 368745#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 366597#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 363500#L791 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 363301#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 365304#L564-1 assume !(0 == getOrigin_~person); 365770#L568-1 assume !(1 == getOrigin_~person); 365772#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 367905#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 372259#L999-1 assume 0 == initPersonOnFloor_~floor; 372250#L1000-2 assume !(0 == initPersonOnFloor_~person); 363600#L1003-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_0~0 := 1; 362820#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 368647#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 364917#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 368786#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 363825#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 363826#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 364116#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 364117#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 368336#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 368141#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 367732#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 364669#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 364074#L2853 assume !(0 != timeShift_~tmp___9~2); 364076#L2944 assume !(1 == ~doorState~0); 364737#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 364738#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 365035#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 367795#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 363685#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 363686#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 363417#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 363223#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 363225#L2612 assume !(1 == ~currentHeading~0); 367647#L2622 assume !(0 == ~currentFloorID~0); 367648#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 368093#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 366409#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 365028#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 365030#L3156 assume !(1 == existInLiftCallsInDirection_~d); 366894#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 366448#L3226-2 [2021-11-02 22:16:29,789 INFO L793 eck$LassoCheckResult]: Loop: 366448#L3226-2 assume !false; 367211#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 367212#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 362939#L3235-2 assume !false; 362940#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 366327#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 366448#L3226-2 [2021-11-02 22:16:29,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:29,790 INFO L85 PathProgramCache]: Analyzing trace with hash 1182449380, now seen corresponding path program 1 times [2021-11-02 22:16:29,790 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:29,790 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [331031857] [2021-11-02 22:16:29,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:29,791 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:29,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:29,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:29,856 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:29,856 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [331031857] [2021-11-02 22:16:29,857 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [331031857] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:29,857 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:29,857 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:16:29,857 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1340388898] [2021-11-02 22:16:29,858 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:29,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:29,858 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 3 times [2021-11-02 22:16:29,859 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:29,859 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [753954045] [2021-11-02 22:16:29,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:29,859 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:29,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:29,865 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:29,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:29,873 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:29,897 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:29,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:16:29,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:16:29,898 INFO L87 Difference]: Start difference. First operand 9601 states and 17950 transitions. cyclomatic complexity: 8384 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:30,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:30,572 INFO L93 Difference]: Finished difference Result 28608 states and 53517 transitions. [2021-11-02 22:16:30,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:30,573 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28608 states and 53517 transitions. [2021-11-02 22:16:30,927 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7233 [2021-11-02 22:16:31,017 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28608 states to 28608 states and 53517 transitions. [2021-11-02 22:16:31,017 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28494 [2021-11-02 22:16:31,046 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28494 [2021-11-02 22:16:31,047 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28608 states and 53517 transitions. [2021-11-02 22:16:31,064 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:31,064 INFO L681 BuchiCegarLoop]: Abstraction has 28608 states and 53517 transitions. [2021-11-02 22:16:31,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28608 states and 53517 transitions. [2021-11-02 22:16:31,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28608 to 9605. [2021-11-02 22:16:31,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9605 states, 9605 states have (on average 1.869130661114003) internal successors, (17953), 9604 states have internal predecessors, (17953), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:31,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9605 states to 9605 states and 17953 transitions. [2021-11-02 22:16:31,331 INFO L704 BuchiCegarLoop]: Abstraction has 9605 states and 17953 transitions. [2021-11-02 22:16:31,332 INFO L587 BuchiCegarLoop]: Abstraction has 9605 states and 17953 transitions. [2021-11-02 22:16:31,332 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-02 22:16:31,332 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9605 states and 17953 transitions. [2021-11-02 22:16:31,379 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:31,380 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:31,380 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:31,381 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:31,381 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:31,384 INFO L791 eck$LassoCheckResult]: Stem: 410206#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 408238#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 408239#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 409374#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 406249#L1651 assume 0 != main_~tmp~12; 406250#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 408867#L564 assume !(0 == getOrigin_~person); 402905#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 402906#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 403487#L999 assume !(0 == initPersonOnFloor_~floor); 403488#L1026 assume !(1 == initPersonOnFloor_~floor); 409254#L1053 assume !(2 == initPersonOnFloor_~floor); 409748#L1080 assume 3 == initPersonOnFloor_~floor; 406965#L1081 assume !(0 == initPersonOnFloor_~person); 406966#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 404818#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 401718#L791 assume !(0 == callOnFloor_~floorID); 401565#L794 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 401519#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 403523#L564-1 assume !(0 == getOrigin_~person); 403989#L568-1 assume !(1 == getOrigin_~person); 403991#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 406126#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 410479#L999-1 assume 0 == initPersonOnFloor_~floor; 410470#L1000-2 assume !(0 == initPersonOnFloor_~person); 401818#L1003-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_0~0 := 1; 401038#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 406868#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 403136#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 407008#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 402043#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 402044#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 402335#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 402336#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 406557#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 406362#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 405953#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 402888#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 402293#L2853 assume !(0 != timeShift_~tmp___9~2); 402295#L2944 assume !(1 == ~doorState~0); 402956#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 402957#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 403254#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 406016#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 401903#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 401904#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 401635#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 401441#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 401443#L2612 assume !(1 == ~currentHeading~0); 405868#L2622 assume !(0 == ~currentFloorID~0); 405869#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 406314#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 404628#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 403248#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 403250#L3156 assume !(1 == existInLiftCallsInDirection_~d); 405115#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 404667#L3226-2 [2021-11-02 22:16:31,385 INFO L793 eck$LassoCheckResult]: Loop: 404667#L3226-2 assume !false; 405432#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 405433#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 401157#L3235-2 assume !false; 401158#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 404546#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 404667#L3226-2 [2021-11-02 22:16:31,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:31,386 INFO L85 PathProgramCache]: Analyzing trace with hash -961606834, now seen corresponding path program 1 times [2021-11-02 22:16:31,386 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:31,386 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1656998095] [2021-11-02 22:16:31,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:31,387 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:31,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:31,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:31,484 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:31,485 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1656998095] [2021-11-02 22:16:31,485 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1656998095] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:31,485 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:31,485 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:16:31,486 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [587531508] [2021-11-02 22:16:31,487 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:31,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:31,488 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 4 times [2021-11-02 22:16:31,488 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:31,489 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1995218077] [2021-11-02 22:16:31,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:31,489 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:31,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:31,505 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:31,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:31,513 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:31,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:31,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:16:31,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:16:31,544 INFO L87 Difference]: Start difference. First operand 9605 states and 17953 transitions. cyclomatic complexity: 8383 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:32,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:32,145 INFO L93 Difference]: Finished difference Result 28613 states and 53519 transitions. [2021-11-02 22:16:32,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:32,146 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28613 states and 53519 transitions. [2021-11-02 22:16:32,289 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7233 [2021-11-02 22:16:32,688 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28613 states to 28613 states and 53519 transitions. [2021-11-02 22:16:32,689 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28499 [2021-11-02 22:16:32,710 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28499 [2021-11-02 22:16:32,711 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28613 states and 53519 transitions. [2021-11-02 22:16:32,712 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:32,712 INFO L681 BuchiCegarLoop]: Abstraction has 28613 states and 53519 transitions. [2021-11-02 22:16:32,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28613 states and 53519 transitions. [2021-11-02 22:16:32,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28613 to 9611. [2021-11-02 22:16:32,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9611 states, 9611 states have (on average 1.868484028717095) internal successors, (17958), 9610 states have internal predecessors, (17958), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:32,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9611 states to 9611 states and 17958 transitions. [2021-11-02 22:16:32,944 INFO L704 BuchiCegarLoop]: Abstraction has 9611 states and 17958 transitions. [2021-11-02 22:16:32,944 INFO L587 BuchiCegarLoop]: Abstraction has 9611 states and 17958 transitions. [2021-11-02 22:16:32,944 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-02 22:16:32,944 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9611 states and 17958 transitions. [2021-11-02 22:16:32,980 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:32,981 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:32,981 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:32,982 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:32,982 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:32,983 INFO L791 eck$LassoCheckResult]: Stem: 448434#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 446466#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 446467#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 447602#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 444477#L1651 assume 0 != main_~tmp~12; 444478#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 447095#L564 assume !(0 == getOrigin_~person); 441133#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 441134#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 441715#L999 assume !(0 == initPersonOnFloor_~floor); 441716#L1026 assume !(1 == initPersonOnFloor_~floor); 447482#L1053 assume !(2 == initPersonOnFloor_~floor); 447977#L1080 assume 3 == initPersonOnFloor_~floor; 445193#L1081 assume !(0 == initPersonOnFloor_~person); 445194#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 443045#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 439945#L791 assume !(0 == callOnFloor_~floorID); 439792#L794 assume !(1 == callOnFloor_~floorID); 439744#L797 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 439746#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 441751#L564-1 assume !(0 == getOrigin_~person); 442215#L568-1 assume !(1 == getOrigin_~person); 442217#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 444354#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 448708#L999-1 assume 0 == initPersonOnFloor_~floor; 448699#L1000-2 assume !(0 == initPersonOnFloor_~person); 440046#L1003-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_0~0 := 1; 439265#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 448716#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 441364#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 445235#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 440271#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 440272#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 440563#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 440564#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 444785#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 444590#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 444181#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 441116#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 440521#L2853 assume !(0 != timeShift_~tmp___9~2); 440523#L2944 assume !(1 == ~doorState~0); 441184#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 441185#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 441480#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 444244#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 440131#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 440132#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 439862#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 439668#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 439670#L2612 assume !(1 == ~currentHeading~0); 444096#L2622 assume !(0 == ~currentFloorID~0); 444097#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 444542#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 442857#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 441475#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 441477#L3156 assume !(1 == existInLiftCallsInDirection_~d); 443343#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 442896#L3226-2 [2021-11-02 22:16:32,983 INFO L793 eck$LassoCheckResult]: Loop: 442896#L3226-2 assume !false; 443657#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 443658#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 439384#L3235-2 assume !false; 439385#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 442775#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 442896#L3226-2 [2021-11-02 22:16:32,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:32,984 INFO L85 PathProgramCache]: Analyzing trace with hash 973676649, now seen corresponding path program 1 times [2021-11-02 22:16:32,984 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:32,984 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421718798] [2021-11-02 22:16:32,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:32,985 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:33,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:33,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:33,051 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:33,051 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421718798] [2021-11-02 22:16:33,051 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421718798] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:33,051 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:33,051 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:16:33,052 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1219442785] [2021-11-02 22:16:33,052 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:33,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:33,053 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 5 times [2021-11-02 22:16:33,053 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:33,053 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1483572246] [2021-11-02 22:16:33,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:33,053 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:33,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:33,058 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:33,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:33,065 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:33,084 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:33,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:16:33,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:16:33,085 INFO L87 Difference]: Start difference. First operand 9611 states and 17958 transitions. cyclomatic complexity: 8382 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:33,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:33,525 INFO L93 Difference]: Finished difference Result 28620 states and 53523 transitions. [2021-11-02 22:16:33,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:33,526 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28620 states and 53523 transitions. [2021-11-02 22:16:33,631 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7233 [2021-11-02 22:16:34,016 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28620 states to 28620 states and 53523 transitions. [2021-11-02 22:16:34,017 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28506 [2021-11-02 22:16:34,034 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28506 [2021-11-02 22:16:34,035 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28620 states and 53523 transitions. [2021-11-02 22:16:34,049 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:34,050 INFO L681 BuchiCegarLoop]: Abstraction has 28620 states and 53523 transitions. [2021-11-02 22:16:34,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28620 states and 53523 transitions. [2021-11-02 22:16:34,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28620 to 9619. [2021-11-02 22:16:34,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9619 states, 9619 states have (on average 1.8676577606819835) internal successors, (17965), 9618 states have internal predecessors, (17965), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:34,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9619 states to 9619 states and 17965 transitions. [2021-11-02 22:16:34,240 INFO L704 BuchiCegarLoop]: Abstraction has 9619 states and 17965 transitions. [2021-11-02 22:16:34,240 INFO L587 BuchiCegarLoop]: Abstraction has 9619 states and 17965 transitions. [2021-11-02 22:16:34,240 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-02 22:16:34,240 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9619 states and 17965 transitions. [2021-11-02 22:16:34,279 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:34,279 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:34,279 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:34,280 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:34,280 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:34,281 INFO L791 eck$LassoCheckResult]: Stem: 486679#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 484708#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 484709#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 485844#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 482718#L1651 assume 0 != main_~tmp~12; 482719#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 485337#L564 assume !(0 == getOrigin_~person); 479372#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 479373#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 479957#L999 assume !(0 == initPersonOnFloor_~floor); 479958#L1026 assume !(1 == initPersonOnFloor_~floor); 485724#L1053 assume !(2 == initPersonOnFloor_~floor); 486220#L1080 assume 3 == initPersonOnFloor_~floor; 483435#L1081 assume !(0 == initPersonOnFloor_~person); 483436#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 481288#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 478184#L791 assume !(0 == callOnFloor_~floorID); 478031#L794 assume !(1 == callOnFloor_~floorID); 477984#L797 assume !(2 == callOnFloor_~floorID); 477985#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 479992#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 479993#L564-1 assume !(0 == getOrigin_~person); 480457#L568-1 assume !(1 == getOrigin_~person); 480459#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 482595#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 486951#L999-1 assume 0 == initPersonOnFloor_~floor; 486942#L1000-2 assume !(0 == initPersonOnFloor_~person); 478285#L1003-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_0~0 := 1; 477508#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 486959#L791-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 479603#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 483478#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 478510#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 478511#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 478802#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 478803#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 483026#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 482831#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 482421#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 479355#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 478760#L2853 assume !(0 != timeShift_~tmp___9~2); 478762#L2944 assume !(1 == ~doorState~0); 479423#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 479424#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 479727#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 482485#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 478370#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 478371#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 478101#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 477911#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 477913#L2612 assume !(1 == ~currentHeading~0); 482336#L2622 assume !(0 == ~currentFloorID~0); 482337#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 482783#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 481097#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 479715#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 479717#L3156 assume !(1 == existInLiftCallsInDirection_~d); 481583#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 481136#L3226-2 [2021-11-02 22:16:34,281 INFO L793 eck$LassoCheckResult]: Loop: 481136#L3226-2 assume !false; 481900#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 481901#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 477624#L3235-2 assume !false; 477625#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 481015#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 481136#L3226-2 [2021-11-02 22:16:34,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:34,282 INFO L85 PathProgramCache]: Analyzing trace with hash 519471859, now seen corresponding path program 1 times [2021-11-02 22:16:34,282 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:34,282 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620870139] [2021-11-02 22:16:34,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:34,283 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:34,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:34,346 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:34,347 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:34,347 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620870139] [2021-11-02 22:16:34,347 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620870139] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:34,347 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:34,347 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:16:34,348 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [731033547] [2021-11-02 22:16:34,348 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:34,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:34,348 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 6 times [2021-11-02 22:16:34,349 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:34,349 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48300804] [2021-11-02 22:16:34,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:34,349 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:34,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:34,354 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:34,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:34,360 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:34,383 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:34,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:16:34,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:16:34,383 INFO L87 Difference]: Start difference. First operand 9619 states and 17965 transitions. cyclomatic complexity: 8381 Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:34,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:34,790 INFO L93 Difference]: Finished difference Result 21087 states and 39420 transitions. [2021-11-02 22:16:34,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-02 22:16:34,791 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21087 states and 39420 transitions. [2021-11-02 22:16:34,866 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8540 [2021-11-02 22:16:34,921 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21087 states to 21087 states and 39420 transitions. [2021-11-02 22:16:34,921 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21049 [2021-11-02 22:16:34,935 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21049 [2021-11-02 22:16:34,935 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21087 states and 39420 transitions. [2021-11-02 22:16:34,951 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:34,951 INFO L681 BuchiCegarLoop]: Abstraction has 21087 states and 39420 transitions. [2021-11-02 22:16:34,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21087 states and 39420 transitions. [2021-11-02 22:16:35,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21087 to 9605. [2021-11-02 22:16:35,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9605 states, 9605 states have (on average 1.8676730869338887) internal successors, (17939), 9604 states have internal predecessors, (17939), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:35,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9605 states to 9605 states and 17939 transitions. [2021-11-02 22:16:35,427 INFO L704 BuchiCegarLoop]: Abstraction has 9605 states and 17939 transitions. [2021-11-02 22:16:35,428 INFO L587 BuchiCegarLoop]: Abstraction has 9605 states and 17939 transitions. [2021-11-02 22:16:35,428 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-02 22:16:35,428 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9605 states and 17939 transitions. [2021-11-02 22:16:35,454 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:35,454 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:35,455 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:35,455 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:35,455 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:35,456 INFO L791 eck$LassoCheckResult]: Stem: 517392#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 515425#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 515426#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 516561#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 513432#L1651 assume 0 != main_~tmp~12; 513433#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 516055#L564 assume !(0 == getOrigin_~person); 510091#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 510092#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 510675#L999 assume !(0 == initPersonOnFloor_~floor); 510676#L1026 assume !(1 == initPersonOnFloor_~floor); 516442#L1053 assume !(2 == initPersonOnFloor_~floor); 516935#L1080 assume 3 == initPersonOnFloor_~floor; 514148#L1081 assume !(0 == initPersonOnFloor_~person); 514149#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 512006#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 508904#L791 assume !(0 == callOnFloor_~floorID); 508751#L794 assume !(1 == callOnFloor_~floorID); 508704#L797 assume !(2 == callOnFloor_~floorID); 508705#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 510710#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 510711#L564-1 assume !(0 == getOrigin_~person); 511176#L568-1 assume !(1 == getOrigin_~person); 511177#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 517414#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 514550#L999-1 assume !(0 == initPersonOnFloor_~floor); 514551#L1026-1 assume 1 == initPersonOnFloor_~floor; 516698#L1027-2 assume !(0 == initPersonOnFloor_~person); 510291#L1030-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_1~0 := 1; 509232#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 517674#L791-2 assume !(0 == callOnFloor_~floorID); 517673#L794-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 510322#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 514191#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 509229#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 509230#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 509521#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 509522#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 513740#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 513545#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 513138#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 510074#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 509479#L2853 assume !(0 != timeShift_~tmp___9~2); 509481#L2944 assume !(1 == ~doorState~0); 510142#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 510143#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 510443#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 513201#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 509089#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 509090#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 508821#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 508631#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 508633#L2612 assume !(1 == ~currentHeading~0); 513053#L2622 assume !(0 == ~currentFloorID~0); 513054#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 513497#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 511815#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 510434#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 510436#L3156 assume !(1 == existInLiftCallsInDirection_~d); 512301#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 511854#L3226-2 [2021-11-02 22:16:35,456 INFO L793 eck$LassoCheckResult]: Loop: 511854#L3226-2 assume !false; 512618#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 512619#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 508343#L3235-2 assume !false; 508344#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 511733#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 511854#L3226-2 [2021-11-02 22:16:35,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:35,457 INFO L85 PathProgramCache]: Analyzing trace with hash 1584588925, now seen corresponding path program 1 times [2021-11-02 22:16:35,457 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:35,457 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [198599009] [2021-11-02 22:16:35,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:35,458 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:35,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:35,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:35,533 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:35,533 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [198599009] [2021-11-02 22:16:35,533 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [198599009] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:35,533 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:35,533 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:16:35,533 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600241386] [2021-11-02 22:16:35,534 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:35,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:35,534 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 7 times [2021-11-02 22:16:35,535 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:35,535 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1100073039] [2021-11-02 22:16:35,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:35,535 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:35,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:35,544 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:35,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:35,550 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:35,575 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:35,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:16:35,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:16:35,576 INFO L87 Difference]: Start difference. First operand 9605 states and 17939 transitions. cyclomatic complexity: 8369 Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 5 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:35,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:35,955 INFO L93 Difference]: Finished difference Result 21061 states and 39371 transitions. [2021-11-02 22:16:35,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-02 22:16:35,958 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21061 states and 39371 transitions. [2021-11-02 22:16:36,034 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8540 [2021-11-02 22:16:36,091 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21061 states to 21061 states and 39371 transitions. [2021-11-02 22:16:36,091 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21023 [2021-11-02 22:16:36,106 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21023 [2021-11-02 22:16:36,106 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21061 states and 39371 transitions. [2021-11-02 22:16:36,125 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:36,125 INFO L681 BuchiCegarLoop]: Abstraction has 21061 states and 39371 transitions. [2021-11-02 22:16:36,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21061 states and 39371 transitions. [2021-11-02 22:16:36,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21061 to 9599. [2021-11-02 22:16:36,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9599 states, 9599 states have (on average 1.8674861964787999) internal successors, (17926), 9598 states have internal predecessors, (17926), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:36,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9599 states to 9599 states and 17926 transitions. [2021-11-02 22:16:36,290 INFO L704 BuchiCegarLoop]: Abstraction has 9599 states and 17926 transitions. [2021-11-02 22:16:36,290 INFO L587 BuchiCegarLoop]: Abstraction has 9599 states and 17926 transitions. [2021-11-02 22:16:36,290 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-02 22:16:36,290 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9599 states and 17926 transitions. [2021-11-02 22:16:36,314 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:36,315 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:36,315 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:36,315 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:36,315 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:36,316 INFO L791 eck$LassoCheckResult]: Stem: 548067#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 546100#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 546101#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 547238#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 544108#L1651 assume 0 != main_~tmp~12; 544109#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 546731#L564 assume !(0 == getOrigin_~person); 540771#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 540772#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 541348#L999 assume !(0 == initPersonOnFloor_~floor); 541349#L1026 assume !(1 == initPersonOnFloor_~floor); 547119#L1053 assume !(2 == initPersonOnFloor_~floor); 547611#L1080 assume 3 == initPersonOnFloor_~floor; 544824#L1081 assume !(0 == initPersonOnFloor_~person); 544825#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 542681#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 539586#L791 assume !(0 == callOnFloor_~floorID); 539433#L794 assume !(1 == callOnFloor_~floorID); 539386#L797 assume !(2 == callOnFloor_~floorID); 539387#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 541386#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 541387#L564-1 assume !(0 == getOrigin_~person); 541851#L568-1 assume !(1 == getOrigin_~person); 541852#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 548089#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 545225#L999-1 assume !(0 == initPersonOnFloor_~floor); 545226#L1026-1 assume !(1 == initPersonOnFloor_~floor); 546605#L1053-1 assume 2 == initPersonOnFloor_~floor; 546606#L1054-2 assume !(0 == initPersonOnFloor_~person); 547236#L1057-2 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_2~0 := 1; 545488#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 548339#L791-2 assume !(0 == callOnFloor_~floorID); 548338#L794-2 assume !(1 == callOnFloor_~floorID); 548337#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 540998#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 544867#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 539911#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 539912#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 540201#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 540202#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 544416#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 544221#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 543814#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 540754#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 540159#L2853 assume !(0 != timeShift_~tmp___9~2); 540161#L2944 assume !(1 == ~doorState~0); 540820#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 540821#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 541119#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 543877#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 539771#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 539772#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 539503#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 539310#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 539312#L2612 assume !(1 == ~currentHeading~0); 543729#L2622 assume !(0 == ~currentFloorID~0); 543730#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 544173#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 542490#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 541110#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 541112#L3156 assume !(1 == existInLiftCallsInDirection_~d); 542976#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 542529#L3226-2 [2021-11-02 22:16:36,316 INFO L793 eck$LassoCheckResult]: Loop: 542529#L3226-2 assume !false; 543293#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 543294#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 539025#L3235-2 assume !false; 539026#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 542408#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 542529#L3226-2 [2021-11-02 22:16:36,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:36,317 INFO L85 PathProgramCache]: Analyzing trace with hash 1884467164, now seen corresponding path program 1 times [2021-11-02 22:16:36,317 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:36,317 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1553070386] [2021-11-02 22:16:36,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:36,317 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:36,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:36,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:36,390 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:36,390 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1553070386] [2021-11-02 22:16:36,390 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1553070386] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:36,390 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:36,391 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:16:36,391 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1606068729] [2021-11-02 22:16:36,392 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:36,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:36,393 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 8 times [2021-11-02 22:16:36,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:36,394 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679282517] [2021-11-02 22:16:36,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:36,394 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:36,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:36,400 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:36,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:36,410 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:36,432 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:36,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:16:36,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:16:36,434 INFO L87 Difference]: Start difference. First operand 9599 states and 17926 transitions. cyclomatic complexity: 8362 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:36,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:36,999 INFO L93 Difference]: Finished difference Result 13442 states and 25095 transitions. [2021-11-02 22:16:36,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:16:36,999 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13442 states and 25095 transitions. [2021-11-02 22:16:37,063 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4454 [2021-11-02 22:16:37,107 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13442 states to 13442 states and 25095 transitions. [2021-11-02 22:16:37,107 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13404 [2021-11-02 22:16:37,116 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13404 [2021-11-02 22:16:37,117 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13442 states and 25095 transitions. [2021-11-02 22:16:37,120 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:37,120 INFO L681 BuchiCegarLoop]: Abstraction has 13442 states and 25095 transitions. [2021-11-02 22:16:37,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13442 states and 25095 transitions. [2021-11-02 22:16:37,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13442 to 9599. [2021-11-02 22:16:37,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9599 states, 9599 states have (on average 1.8666527763308678) internal successors, (17918), 9598 states have internal predecessors, (17918), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:37,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9599 states to 9599 states and 17918 transitions. [2021-11-02 22:16:37,266 INFO L704 BuchiCegarLoop]: Abstraction has 9599 states and 17918 transitions. [2021-11-02 22:16:37,266 INFO L587 BuchiCegarLoop]: Abstraction has 9599 states and 17918 transitions. [2021-11-02 22:16:37,266 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-02 22:16:37,267 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9599 states and 17918 transitions. [2021-11-02 22:16:37,302 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2411 [2021-11-02 22:16:37,302 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:37,302 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:37,303 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:37,303 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:37,303 INFO L791 eck$LassoCheckResult]: Stem: 571117#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 569149#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 569150#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 570286#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 567159#L1651 assume 0 != main_~tmp~12; 567160#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 569779#L564 assume !(0 == getOrigin_~person); 563820#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 563821#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 564399#L999 assume !(0 == initPersonOnFloor_~floor); 564400#L1026 assume !(1 == initPersonOnFloor_~floor); 570167#L1053 assume !(2 == initPersonOnFloor_~floor); 570660#L1080 assume 3 == initPersonOnFloor_~floor; 567875#L1081 assume !(0 == initPersonOnFloor_~person); 567876#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 565729#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 562636#L791 assume !(0 == callOnFloor_~floorID); 562483#L794 assume !(1 == callOnFloor_~floorID); 562436#L797 assume !(2 == callOnFloor_~floorID); 562437#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 564435#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 564436#L564-1 assume !(0 == getOrigin_~person); 564902#L568-1 assume !(1 == getOrigin_~person); 564903#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 571139#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 568277#L999-1 assume !(0 == initPersonOnFloor_~floor); 568278#L1026-1 assume !(1 == initPersonOnFloor_~floor); 569653#L1053-1 assume 2 == initPersonOnFloor_~floor; 569654#L1054-2 assume !(0 == initPersonOnFloor_~person); 570284#L1057-2 assume !(1 == initPersonOnFloor_~person); 568539#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 568540#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 571405#L791-2 assume !(0 == callOnFloor_~floorID); 571404#L794-2 assume !(1 == callOnFloor_~floorID); 571403#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 564048#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 567918#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 562960#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 562961#L728 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 563250#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 563251#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 567467#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 567272#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 566866#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 563803#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 563208#L2853 assume !(0 != timeShift_~tmp___9~2); 563210#L2944 assume !(1 == ~doorState~0); 563870#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 563871#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 564166#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 566929#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 562820#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 562821#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 562553#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 562360#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 562362#L2612 assume !(1 == ~currentHeading~0); 566781#L2622 assume !(0 == ~currentFloorID~0); 566782#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 567224#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 565540#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 564160#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 564162#L3156 assume !(1 == existInLiftCallsInDirection_~d); 566028#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 565579#L3226-2 [2021-11-02 22:16:37,304 INFO L793 eck$LassoCheckResult]: Loop: 565579#L3226-2 assume !false; 566345#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 566346#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 562075#L3235-2 assume !false; 562076#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 565458#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 565579#L3226-2 [2021-11-02 22:16:37,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:37,305 INFO L85 PathProgramCache]: Analyzing trace with hash 1152740338, now seen corresponding path program 1 times [2021-11-02 22:16:37,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:37,305 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1312218664] [2021-11-02 22:16:37,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:37,306 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:37,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:37,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:37,394 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:37,394 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1312218664] [2021-11-02 22:16:37,394 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1312218664] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:37,394 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:37,395 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:16:37,395 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839189345] [2021-11-02 22:16:37,395 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:37,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:37,396 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 9 times [2021-11-02 22:16:37,396 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:37,396 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218804744] [2021-11-02 22:16:37,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:37,397 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:37,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:37,403 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:37,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:37,410 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:37,432 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:37,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:16:37,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:16:37,433 INFO L87 Difference]: Start difference. First operand 9599 states and 17918 transitions. cyclomatic complexity: 8354 Second operand has 6 states, 6 states have (on average 10.5) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:48,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:16:48,870 INFO L93 Difference]: Finished difference Result 81272 states and 150907 transitions. [2021-11-02 22:16:48,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-02 22:16:48,870 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 81272 states and 150907 transitions. [2021-11-02 22:16:49,154 INFO L131 ngComponentsAnalysis]: Automaton has 322 accepting balls. 28220 [2021-11-02 22:16:49,366 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 81272 states to 81272 states and 150907 transitions. [2021-11-02 22:16:49,366 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80968 [2021-11-02 22:16:49,411 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80968 [2021-11-02 22:16:49,411 INFO L73 IsDeterministic]: Start isDeterministic. Operand 81272 states and 150907 transitions. [2021-11-02 22:16:49,412 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:16:49,412 INFO L681 BuchiCegarLoop]: Abstraction has 81272 states and 150907 transitions. [2021-11-02 22:16:49,456 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81272 states and 150907 transitions. [2021-11-02 22:16:49,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81272 to 13418. [2021-11-02 22:16:49,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13418 states, 13418 states have (on average 1.8667461618721122) internal successors, (25048), 13417 states have internal predecessors, (25048), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:16:50,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13418 states to 13418 states and 25048 transitions. [2021-11-02 22:16:50,148 INFO L704 BuchiCegarLoop]: Abstraction has 13418 states and 25048 transitions. [2021-11-02 22:16:50,148 INFO L587 BuchiCegarLoop]: Abstraction has 13418 states and 25048 transitions. [2021-11-02 22:16:50,148 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-11-02 22:16:50,148 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13418 states and 25048 transitions. [2021-11-02 22:16:50,194 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4460 [2021-11-02 22:16:50,194 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:16:50,195 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:16:50,195 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:16:50,195 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:16:50,196 INFO L791 eck$LassoCheckResult]: Stem: 662310#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 660162#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 660163#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 661385#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 658112#L1651 assume 0 != main_~tmp~12; 658113#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 660844#L564 assume !(0 == getOrigin_~person); 654726#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 654727#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 655310#L999 assume !(0 == initPersonOnFloor_~floor); 655311#L1026 assume !(1 == initPersonOnFloor_~floor); 661254#L1053 assume !(2 == initPersonOnFloor_~floor); 661785#L1080 assume 3 == initPersonOnFloor_~floor; 658843#L1081 assume !(0 == initPersonOnFloor_~person); 658844#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 656648#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 653538#L791 assume !(0 == callOnFloor_~floorID); 653385#L794 assume !(1 == callOnFloor_~floorID); 653338#L797 assume !(2 == callOnFloor_~floorID); 653339#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 655346#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 655347#L564-1 assume !(0 == getOrigin_~person); 655812#L568-1 assume !(1 == getOrigin_~person); 655813#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 662343#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 659260#L999-1 assume !(0 == initPersonOnFloor_~floor); 659261#L1026-1 assume !(1 == initPersonOnFloor_~floor); 660708#L1053-1 assume 2 == initPersonOnFloor_~floor; 660709#L1054-2 assume !(0 == initPersonOnFloor_~person); 661383#L1057-2 assume !(1 == initPersonOnFloor_~person); 659530#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 659531#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 662694#L791-2 assume !(0 == callOnFloor_~floorID); 662693#L794-2 assume !(1 == callOnFloor_~floorID); 662692#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 654955#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 658885#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 653864#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 653865#L728 assume !(0 == isFloorCalling_~floorID); 662129#L732 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 660593#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 662689#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 662688#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 658227#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 657812#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 654709#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 654112#L2853 assume !(0 != timeShift_~tmp___9~2); 654114#L2944 assume !(1 == ~doorState~0); 654776#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 654777#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 655074#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 657877#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 653722#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 653723#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 653455#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 653262#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 653264#L2612 assume !(1 == ~currentHeading~0); 657727#L2622 assume !(0 == ~currentFloorID~0); 657728#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 658177#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 656459#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 655069#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 655071#L3156 assume !(1 == existInLiftCallsInDirection_~d); 656951#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 656498#L3226-2 [2021-11-02 22:16:50,196 INFO L793 eck$LassoCheckResult]: Loop: 656498#L3226-2 assume !false; 657270#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 657271#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 652977#L3235-2 assume !false; 652978#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 656375#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 656498#L3226-2 [2021-11-02 22:16:50,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:50,197 INFO L85 PathProgramCache]: Analyzing trace with hash 2078759850, now seen corresponding path program 1 times [2021-11-02 22:16:50,197 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:50,197 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040718676] [2021-11-02 22:16:50,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:50,198 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:50,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:16:50,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:16:50,305 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:16:50,305 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040718676] [2021-11-02 22:16:50,306 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040718676] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:16:50,306 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:16:50,306 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:16:50,306 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1952836352] [2021-11-02 22:16:50,306 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:16:50,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:16:50,307 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 10 times [2021-11-02 22:16:50,307 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:16:50,307 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1579151415] [2021-11-02 22:16:50,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:16:50,308 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:16:50,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:50,313 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:16:50,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:16:50,320 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:16:50,344 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:16:50,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:16:50,345 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:16:50,345 INFO L87 Difference]: Start difference. First operand 13418 states and 25048 transitions. cyclomatic complexity: 11674 Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:04,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:04,576 INFO L93 Difference]: Finished difference Result 104386 states and 193829 transitions. [2021-11-02 22:17:04,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-02 22:17:04,577 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104386 states and 193829 transitions. [2021-11-02 22:17:04,972 INFO L131 ngComponentsAnalysis]: Automaton has 387 accepting balls. 40870 [2021-11-02 22:17:05,300 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104386 states to 104386 states and 193829 transitions. [2021-11-02 22:17:05,300 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104082 [2021-11-02 22:17:05,367 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104082 [2021-11-02 22:17:05,367 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104386 states and 193829 transitions. [2021-11-02 22:17:05,369 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:05,369 INFO L681 BuchiCegarLoop]: Abstraction has 104386 states and 193829 transitions. [2021-11-02 22:17:05,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104386 states and 193829 transitions. [2021-11-02 22:17:06,252 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104386 to 17222. [2021-11-02 22:17:06,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17222 states, 17222 states have (on average 1.8675531297178027) internal successors, (32163), 17221 states have internal predecessors, (32163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:06,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17222 states to 17222 states and 32163 transitions. [2021-11-02 22:17:06,305 INFO L704 BuchiCegarLoop]: Abstraction has 17222 states and 32163 transitions. [2021-11-02 22:17:06,305 INFO L587 BuchiCegarLoop]: Abstraction has 17222 states and 32163 transitions. [2021-11-02 22:17:06,305 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-11-02 22:17:06,306 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17222 states and 32163 transitions. [2021-11-02 22:17:06,357 INFO L131 ngComponentsAnalysis]: Automaton has 51 accepting balls. 6506 [2021-11-02 22:17:06,357 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:17:06,357 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:17:06,358 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:17:06,358 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:17:06,358 INFO L791 eck$LassoCheckResult]: Stem: 780152#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 778007#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 778008#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 779234#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 775946#L1651 assume 0 != main_~tmp~12; 775947#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 778685#L564 assume !(0 == getOrigin_~person); 772560#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 772561#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 773141#L999 assume !(0 == initPersonOnFloor_~floor); 773142#L1026 assume !(1 == initPersonOnFloor_~floor); 779106#L1053 assume !(2 == initPersonOnFloor_~floor); 779638#L1080 assume 3 == initPersonOnFloor_~floor; 776688#L1081 assume !(0 == initPersonOnFloor_~person); 776689#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 774486#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 771373#L791 assume !(0 == callOnFloor_~floorID); 771220#L794 assume !(1 == callOnFloor_~floorID); 771173#L797 assume !(2 == callOnFloor_~floorID); 771174#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 773177#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 773178#L564-1 assume !(0 == getOrigin_~person); 773644#L568-1 assume !(1 == getOrigin_~person); 773645#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 780188#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 777107#L999-1 assume !(0 == initPersonOnFloor_~floor); 777108#L1026-1 assume !(1 == initPersonOnFloor_~floor); 778546#L1053-1 assume 2 == initPersonOnFloor_~floor; 778547#L1054-2 assume !(0 == initPersonOnFloor_~person); 779232#L1057-2 assume !(1 == initPersonOnFloor_~person); 777379#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 777380#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 780531#L791-2 assume !(0 == callOnFloor_~floorID); 780530#L794-2 assume !(1 == callOnFloor_~floorID); 780529#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 772788#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 776731#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 771700#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 771701#L728 assume !(0 == isFloorCalling_~floorID); 779982#L732 assume !(1 == isFloorCalling_~floorID); 779983#L736 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 778435#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 780526#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 780525#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 776063#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 775648#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 772543#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 771948#L2853 assume !(0 != timeShift_~tmp___9~2); 771950#L2944 assume !(1 == ~doorState~0); 772610#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 772611#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 772904#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 775712#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 771558#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 771559#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 771290#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 771097#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 771099#L2612 assume !(1 == ~currentHeading~0); 775562#L2622 assume !(0 == ~currentFloorID~0); 775563#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 776013#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 774294#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 772899#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 772901#L3156 assume !(1 == existInLiftCallsInDirection_~d); 774789#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 774333#L3226-2 [2021-11-02 22:17:06,358 INFO L793 eck$LassoCheckResult]: Loop: 774333#L3226-2 assume !false; 775108#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 775109#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 770812#L3235-2 assume !false; 770813#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 774211#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 774333#L3226-2 [2021-11-02 22:17:06,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:06,359 INFO L85 PathProgramCache]: Analyzing trace with hash -1075518473, now seen corresponding path program 1 times [2021-11-02 22:17:06,359 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:06,359 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [671120817] [2021-11-02 22:17:06,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:06,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:06,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:17:06,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:17:06,421 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:17:06,421 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [671120817] [2021-11-02 22:17:06,421 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [671120817] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:17:06,421 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:17:06,421 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-02 22:17:06,422 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1425825793] [2021-11-02 22:17:06,422 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:17:06,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:06,423 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 11 times [2021-11-02 22:17:06,423 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:06,423 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [857210360] [2021-11-02 22:17:06,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:06,424 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:06,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:06,429 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:17:06,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:06,436 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:17:06,458 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:17:06,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:17:06,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:17:06,460 INFO L87 Difference]: Start difference. First operand 17222 states and 32163 transitions. cyclomatic complexity: 14994 Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 2 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:06,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:06,665 INFO L93 Difference]: Finished difference Result 19356 states and 35785 transitions. [2021-11-02 22:17:06,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:17:06,666 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19356 states and 35785 transitions. [2021-11-02 22:17:06,770 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 8026 [2021-11-02 22:17:06,848 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19356 states to 19356 states and 35785 transitions. [2021-11-02 22:17:06,848 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19280 [2021-11-02 22:17:06,866 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19280 [2021-11-02 22:17:06,866 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19356 states and 35785 transitions. [2021-11-02 22:17:06,867 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:06,867 INFO L681 BuchiCegarLoop]: Abstraction has 19356 states and 35785 transitions. [2021-11-02 22:17:06,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19356 states and 35785 transitions. [2021-11-02 22:17:07,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19356 to 19356. [2021-11-02 22:17:07,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19356 states, 19356 states have (on average 1.8487807398222773) internal successors, (35785), 19355 states have internal predecessors, (35785), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:07,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19356 states to 19356 states and 35785 transitions. [2021-11-02 22:17:07,147 INFO L704 BuchiCegarLoop]: Abstraction has 19356 states and 35785 transitions. [2021-11-02 22:17:07,147 INFO L587 BuchiCegarLoop]: Abstraction has 19356 states and 35785 transitions. [2021-11-02 22:17:07,147 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-11-02 22:17:07,147 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19356 states and 35785 transitions. [2021-11-02 22:17:07,215 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 8026 [2021-11-02 22:17:07,215 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:17:07,215 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:17:07,216 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:17:07,216 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:17:07,217 INFO L791 eck$LassoCheckResult]: Stem: 816609#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 814549#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 814550#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 815731#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 812516#L1651 assume 0 != main_~tmp~12; 812517#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 815197#L564 assume !(0 == getOrigin_~person); 809143#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 809144#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 809726#L999 assume !(0 == initPersonOnFloor_~floor); 809727#L1026 assume !(1 == initPersonOnFloor_~floor); 815606#L1053 assume !(2 == initPersonOnFloor_~floor); 816127#L1080 assume 3 == initPersonOnFloor_~floor; 813248#L1081 assume !(0 == initPersonOnFloor_~person); 813249#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 811072#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 807958#L791 assume !(0 == callOnFloor_~floorID); 807805#L794 assume !(1 == callOnFloor_~floorID); 807758#L797 assume !(2 == callOnFloor_~floorID); 807759#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 809762#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 809763#L564-1 assume !(0 == getOrigin_~person); 810229#L568-1 assume !(1 == getOrigin_~person); 810230#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 816638#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 813657#L999-1 assume !(0 == initPersonOnFloor_~floor); 813658#L1026-1 assume !(1 == initPersonOnFloor_~floor); 815066#L1053-1 assume 2 == initPersonOnFloor_~floor; 815067#L1054-2 assume !(0 == initPersonOnFloor_~person); 815729#L1057-2 assume !(1 == initPersonOnFloor_~person); 813926#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 813927#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 816749#L791-2 assume !(0 == callOnFloor_~floorID); 816750#L794-2 assume !(1 == callOnFloor_~floorID); 817421#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 809372#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 813291#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 808282#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 808283#L728 assume !(0 == isFloorCalling_~floorID); 816443#L732 assume !(1 == isFloorCalling_~floorID); 816444#L736 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 814961#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 817418#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 817417#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 812629#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 812219#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 809126#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 808532#L2853 assume !(0 != timeShift_~tmp___9~2); 808534#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 809194#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 809195#L728-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 809489#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 812283#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 808142#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 808143#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 807875#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 807682#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 807684#L2612 assume !(1 == ~currentHeading~0); 812134#L2622 assume !(0 == ~currentFloorID~0); 812135#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 813669#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 817193#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 817194#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 817258#L3156 assume !(1 == existInLiftCallsInDirection_~d); 817257#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 817256#L3226-2 [2021-11-02 22:17:07,218 INFO L793 eck$LassoCheckResult]: Loop: 817256#L3226-2 assume !false; 817255#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 817253#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 817250#L3235-2 assume !false; 817247#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 817248#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 817256#L3226-2 [2021-11-02 22:17:07,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:07,218 INFO L85 PathProgramCache]: Analyzing trace with hash 512829429, now seen corresponding path program 1 times [2021-11-02 22:17:07,218 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:07,218 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345659292] [2021-11-02 22:17:07,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:07,219 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:07,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:17:07,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:17:07,315 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:17:07,315 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345659292] [2021-11-02 22:17:07,317 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [345659292] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:17:07,318 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:17:07,318 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:17:07,318 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2034279432] [2021-11-02 22:17:07,318 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:17:07,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:07,319 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 12 times [2021-11-02 22:17:07,319 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:07,319 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1394901634] [2021-11-02 22:17:07,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:07,320 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:07,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:07,325 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:17:07,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:07,332 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:17:07,355 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:17:07,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-02 22:17:07,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-02 22:17:07,356 INFO L87 Difference]: Start difference. First operand 19356 states and 35785 transitions. cyclomatic complexity: 16532 Second operand has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:26,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:26,615 INFO L93 Difference]: Finished difference Result 117235 states and 213731 transitions. [2021-11-02 22:17:26,616 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-02 22:17:26,616 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117235 states and 213731 transitions. [2021-11-02 22:17:27,022 INFO L131 ngComponentsAnalysis]: Automaton has 649 accepting balls. 49034 [2021-11-02 22:17:27,341 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117235 states to 117235 states and 213731 transitions. [2021-11-02 22:17:27,342 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 116969 [2021-11-02 22:17:27,416 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 116969 [2021-11-02 22:17:27,416 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117235 states and 213731 transitions. [2021-11-02 22:17:27,417 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:27,417 INFO L681 BuchiCegarLoop]: Abstraction has 117235 states and 213731 transitions. [2021-11-02 22:17:27,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117235 states and 213731 transitions. [2021-11-02 22:17:28,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117235 to 23273. [2021-11-02 22:17:28,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23273 states, 23273 states have (on average 1.8080608430369958) internal successors, (42079), 23272 states have internal predecessors, (42079), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:28,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23273 states to 23273 states and 42079 transitions. [2021-11-02 22:17:28,422 INFO L704 BuchiCegarLoop]: Abstraction has 23273 states and 42079 transitions. [2021-11-02 22:17:28,422 INFO L587 BuchiCegarLoop]: Abstraction has 23273 states and 42079 transitions. [2021-11-02 22:17:28,422 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-11-02 22:17:28,422 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23273 states and 42079 transitions. [2021-11-02 22:17:28,476 INFO L131 ngComponentsAnalysis]: Automaton has 116 accepting balls. 8660 [2021-11-02 22:17:28,476 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:17:28,476 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:17:28,476 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:17:28,477 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:17:28,477 INFO L791 eck$LassoCheckResult]: Stem: 952851#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 950829#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 950830#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 951979#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 948864#L1651 assume 0 != main_~tmp~12; 948865#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 951463#L564 assume !(0 == getOrigin_~person); 945646#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 945647#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 946208#L999 assume !(0 == initPersonOnFloor_~floor); 946209#L1026 assume !(1 == initPersonOnFloor_~floor); 951859#L1053 assume !(2 == initPersonOnFloor_~floor); 952355#L1080 assume 3 == initPersonOnFloor_~floor; 949557#L1081 assume !(0 == initPersonOnFloor_~person); 949558#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 947495#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 944540#L791 assume !(0 == callOnFloor_~floorID); 944387#L794 assume !(1 == callOnFloor_~floorID); 944340#L797 assume !(2 == callOnFloor_~floorID); 944341#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 946244#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 946245#L564-1 assume !(0 == getOrigin_~person); 946697#L568-1 assume !(1 == getOrigin_~person); 946698#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 952880#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 949951#L999-1 assume !(0 == initPersonOnFloor_~floor); 949952#L1026-1 assume !(1 == initPersonOnFloor_~floor); 951337#L1053-1 assume 2 == initPersonOnFloor_~floor; 951338#L1054-2 assume !(0 == initPersonOnFloor_~person); 951977#L1057-2 assume !(1 == initPersonOnFloor_~person); 950210#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 950211#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 953204#L791-2 assume !(0 == callOnFloor_~floorID); 953203#L794-2 assume !(1 == callOnFloor_~floorID); 953202#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 945868#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 949599#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 944838#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 944839#L728 assume !(0 == isFloorCalling_~floorID); 952688#L732 assume !(1 == isFloorCalling_~floorID); 952689#L736 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 951235#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 953200#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 953198#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 948972#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 948581#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 945632#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 945076#L2853 assume !(0 != timeShift_~tmp___9~2); 945078#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 945694#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 945695#L728-3 assume !(0 == isFloorCalling_~floorID); 952804#L732-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 945982#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 948640#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 944705#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 944706#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 944457#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 944271#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 944273#L2612 assume !(1 == ~currentHeading~0); 948501#L2622 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 948502#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 949963#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 953520#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 953521#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 953525#L3156 assume !(1 == existInLiftCallsInDirection_~d); 953676#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 953675#L3226-2 [2021-11-02 22:17:28,477 INFO L793 eck$LassoCheckResult]: Loop: 953675#L3226-2 assume !false; 953674#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 953673#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 953670#L3235-2 assume !false; 953668#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 953669#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 953675#L3226-2 [2021-11-02 22:17:28,478 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:28,478 INFO L85 PathProgramCache]: Analyzing trace with hash -834429029, now seen corresponding path program 1 times [2021-11-02 22:17:28,478 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:28,478 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487963304] [2021-11-02 22:17:28,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:28,479 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:28,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:17:28,556 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:17:28,556 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:17:28,557 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487963304] [2021-11-02 22:17:28,557 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [487963304] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:17:28,557 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:17:28,557 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:17:28,557 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [976345761] [2021-11-02 22:17:28,558 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:17:28,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:28,558 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 13 times [2021-11-02 22:17:28,558 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:28,558 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1063305398] [2021-11-02 22:17:28,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:28,559 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:28,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:28,563 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:17:28,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:28,569 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:17:28,586 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:17:28,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:17:28,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:17:28,587 INFO L87 Difference]: Start difference. First operand 23273 states and 42079 transitions. cyclomatic complexity: 18926 Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:31,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:31,489 INFO L93 Difference]: Finished difference Result 40547 states and 73879 transitions. [2021-11-02 22:17:31,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-02 22:17:31,489 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40547 states and 73879 transitions. [2021-11-02 22:17:32,086 INFO L131 ngComponentsAnalysis]: Automaton has 228 accepting balls. 15468 [2021-11-02 22:17:32,167 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40547 states to 40547 states and 73879 transitions. [2021-11-02 22:17:32,167 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40395 [2021-11-02 22:17:32,188 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40395 [2021-11-02 22:17:32,188 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40547 states and 73879 transitions. [2021-11-02 22:17:32,198 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:32,199 INFO L681 BuchiCegarLoop]: Abstraction has 40547 states and 73879 transitions. [2021-11-02 22:17:32,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40547 states and 73879 transitions. [2021-11-02 22:17:32,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40547 to 16091. [2021-11-02 22:17:32,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16091 states, 16091 states have (on average 1.8044869802995462) internal successors, (29036), 16090 states have internal predecessors, (29036), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:32,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16091 states to 16091 states and 29036 transitions. [2021-11-02 22:17:32,424 INFO L704 BuchiCegarLoop]: Abstraction has 16091 states and 29036 transitions. [2021-11-02 22:17:32,424 INFO L587 BuchiCegarLoop]: Abstraction has 16091 states and 29036 transitions. [2021-11-02 22:17:32,424 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-11-02 22:17:32,424 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16091 states and 29036 transitions. [2021-11-02 22:17:32,466 INFO L131 ngComponentsAnalysis]: Automaton has 90 accepting balls. 4818 [2021-11-02 22:17:32,466 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:17:32,466 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:17:32,467 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:17:32,467 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:17:32,468 INFO L791 eck$LassoCheckResult]: Stem: 1016872#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1014741#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 1014742#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1015943#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 1012734#L1651 assume 0 != main_~tmp~12; 1012735#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1015410#L564 assume !(0 == getOrigin_~person); 1009477#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 1009478#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1010045#L999 assume !(0 == initPersonOnFloor_~floor); 1010046#L1026 assume !(1 == initPersonOnFloor_~floor); 1015822#L1053 assume !(2 == initPersonOnFloor_~floor); 1016352#L1080 assume 3 == initPersonOnFloor_~floor; 1013438#L1081 assume !(0 == initPersonOnFloor_~person); 1013439#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 1011347#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1008364#L791 assume !(0 == callOnFloor_~floorID); 1008211#L794 assume !(1 == callOnFloor_~floorID); 1008163#L797 assume !(2 == callOnFloor_~floorID); 1008164#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 1010083#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1010084#L564-1 assume !(0 == getOrigin_~person); 1010535#L568-1 assume !(1 == getOrigin_~person); 1010536#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 1016898#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1013844#L999-1 assume !(0 == initPersonOnFloor_~floor); 1013845#L1026-1 assume !(1 == initPersonOnFloor_~floor); 1015279#L1053-1 assume 2 == initPersonOnFloor_~floor; 1015280#L1054-2 assume !(0 == initPersonOnFloor_~person); 1015941#L1057-2 assume !(1 == initPersonOnFloor_~person); 1014105#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 1014106#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1017426#L791-2 assume !(0 == callOnFloor_~floorID); 1017421#L794-2 assume !(1 == callOnFloor_~floorID); 1017416#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 1009698#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1013481#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 1008662#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 1008663#L728 assume !(0 == isFloorCalling_~floorID); 1016697#L732 assume !(1 == isFloorCalling_~floorID); 1016698#L736 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 1015161#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 1017396#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 1017393#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1012845#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 1012450#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 1009463#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 1008902#L2853 assume !(0 != timeShift_~tmp___9~2); 1008904#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 1009526#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 1009527#L728-3 assume !(0 == isFloorCalling_~floorID); 1016824#L732-3 assume !(1 == isFloorCalling_~floorID); 1009815#L736-3 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 1009816#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 1012510#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 1008531#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1008532#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 1008281#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 1008097#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1008099#L2612 assume !(1 == ~currentHeading~0); 1012366#L2622 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1012367#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1013856#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 1011148#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 1009808#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 1009810#L3156 assume !(1 == existInLiftCallsInDirection_~d); 1011624#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 1011188#L3226-2 [2021-11-02 22:17:32,468 INFO L793 eck$LassoCheckResult]: Loop: 1011188#L3226-2 assume !false; 1011930#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 1011931#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 1007825#L3235-2 assume !false; 1007826#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 1011065#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 1011188#L3226-2 [2021-11-02 22:17:32,469 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:32,469 INFO L85 PathProgramCache]: Analyzing trace with hash -1511290440, now seen corresponding path program 1 times [2021-11-02 22:17:32,469 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:32,469 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469056714] [2021-11-02 22:17:32,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:32,470 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:32,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:17:32,540 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:17:32,540 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:17:32,541 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469056714] [2021-11-02 22:17:32,541 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469056714] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:17:32,541 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:17:32,541 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:17:32,541 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1622893647] [2021-11-02 22:17:32,542 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:17:32,542 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:32,542 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 14 times [2021-11-02 22:17:32,542 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:32,542 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630835704] [2021-11-02 22:17:32,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:32,543 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:32,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:32,547 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:17:32,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:32,553 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:17:32,570 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:17:32,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:17:32,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:17:32,571 INFO L87 Difference]: Start difference. First operand 16091 states and 29036 transitions. cyclomatic complexity: 13039 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:35,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:35,720 INFO L93 Difference]: Finished difference Result 28130 states and 51171 transitions. [2021-11-02 22:17:35,720 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-02 22:17:35,720 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28130 states and 51171 transitions. [2021-11-02 22:17:35,831 INFO L131 ngComponentsAnalysis]: Automaton has 178 accepting balls. 8710 [2021-11-02 22:17:35,907 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28130 states to 28130 states and 51171 transitions. [2021-11-02 22:17:35,907 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27978 [2021-11-02 22:17:35,926 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27978 [2021-11-02 22:17:35,926 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28130 states and 51171 transitions. [2021-11-02 22:17:35,929 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:35,929 INFO L681 BuchiCegarLoop]: Abstraction has 28130 states and 51171 transitions. [2021-11-02 22:17:35,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28130 states and 51171 transitions. [2021-11-02 22:17:36,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28130 to 16091. [2021-11-02 22:17:36,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16091 states, 16091 states have (on average 1.8026225840531975) internal successors, (29006), 16090 states have internal predecessors, (29006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:36,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16091 states to 16091 states and 29006 transitions. [2021-11-02 22:17:36,155 INFO L704 BuchiCegarLoop]: Abstraction has 16091 states and 29006 transitions. [2021-11-02 22:17:36,156 INFO L587 BuchiCegarLoop]: Abstraction has 16091 states and 29006 transitions. [2021-11-02 22:17:36,156 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-11-02 22:17:36,156 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16091 states and 29006 transitions. [2021-11-02 22:17:36,198 INFO L131 ngComponentsAnalysis]: Automaton has 90 accepting balls. 4818 [2021-11-02 22:17:36,198 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:17:36,198 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:17:36,198 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:17:36,199 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:17:36,199 INFO L791 eck$LassoCheckResult]: Stem: 1061081#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1058960#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 1058961#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1060146#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 1056954#L1651 assume 0 != main_~tmp~12; 1056955#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1059618#L564 assume !(0 == getOrigin_~person); 1053708#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 1053709#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1054269#L999 assume !(0 == initPersonOnFloor_~floor); 1054270#L1026 assume !(1 == initPersonOnFloor_~floor); 1060024#L1053 assume !(2 == initPersonOnFloor_~floor); 1060553#L1080 assume 3 == initPersonOnFloor_~floor; 1057665#L1081 assume !(0 == initPersonOnFloor_~person); 1057666#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 1055562#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1052591#L791 assume !(0 == callOnFloor_~floorID); 1052439#L794 assume !(1 == callOnFloor_~floorID); 1052392#L797 assume !(2 == callOnFloor_~floorID); 1052393#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 1054305#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1054306#L564-1 assume !(0 == getOrigin_~person); 1054757#L568-1 assume !(1 == getOrigin_~person); 1054758#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 1061108#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1058070#L999-1 assume !(0 == initPersonOnFloor_~floor); 1058071#L1026-1 assume !(1 == initPersonOnFloor_~floor); 1059486#L1053-1 assume 2 == initPersonOnFloor_~floor; 1059487#L1054-2 assume !(0 == initPersonOnFloor_~person); 1060144#L1057-2 assume !(1 == initPersonOnFloor_~person); 1058331#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 1058332#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1061693#L791-2 assume !(0 == callOnFloor_~floorID); 1061692#L794-2 assume !(1 == callOnFloor_~floorID); 1061691#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 1053928#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1057711#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 1052890#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 1052891#L728 assume !(0 == isFloorCalling_~floorID); 1060899#L732 assume !(1 == isFloorCalling_~floorID); 1060900#L736 assume !(2 == isFloorCalling_~floorID); 1059982#L740 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 1059373#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 1061723#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 1061670#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1057062#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 1056666#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 1053694#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 1053128#L2853 assume !(0 != timeShift_~tmp___9~2); 1053130#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 1053757#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 1053758#L728-3 assume !(0 == isFloorCalling_~floorID); 1061028#L732-3 assume !(1 == isFloorCalling_~floorID); 1054041#L736-3 assume !(2 == isFloorCalling_~floorID); 1054042#L740-3 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 1056020#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 1056725#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 1052757#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1052758#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 1052508#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 1052322#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1052324#L2612 assume !(1 == ~currentHeading~0); 1056581#L2622 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1056582#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1058083#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 1062953#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 1062954#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 1062962#L3156 assume !(1 == existInLiftCallsInDirection_~d); 1063442#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 1063443#L3226-2 [2021-11-02 22:17:36,199 INFO L793 eck$LassoCheckResult]: Loop: 1063443#L3226-2 assume !false; 1063446#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 1063400#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 1063398#L3235-2 assume !false; 1063395#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 1063396#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 1063443#L3226-2 [2021-11-02 22:17:36,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:36,200 INFO L85 PathProgramCache]: Analyzing trace with hash -1227508440, now seen corresponding path program 1 times [2021-11-02 22:17:36,200 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:36,200 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559874358] [2021-11-02 22:17:36,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:36,201 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:36,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:17:36,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:17:36,268 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:17:36,268 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559874358] [2021-11-02 22:17:36,268 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559874358] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:17:36,269 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:17:36,269 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:17:36,269 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057236589] [2021-11-02 22:17:36,269 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:17:36,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:36,270 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 15 times [2021-11-02 22:17:36,270 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:36,270 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [881205572] [2021-11-02 22:17:36,270 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:36,270 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:36,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:36,274 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:17:36,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:36,280 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:17:36,298 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:17:36,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:17:36,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:17:36,299 INFO L87 Difference]: Start difference. First operand 16091 states and 29006 transitions. cyclomatic complexity: 13009 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:39,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:39,169 INFO L93 Difference]: Finished difference Result 28130 states and 51141 transitions. [2021-11-02 22:17:39,169 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-02 22:17:39,170 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28130 states and 51141 transitions. [2021-11-02 22:17:39,249 INFO L131 ngComponentsAnalysis]: Automaton has 178 accepting balls. 8710 [2021-11-02 22:17:39,308 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28130 states to 28130 states and 51141 transitions. [2021-11-02 22:17:39,308 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27978 [2021-11-02 22:17:39,322 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27978 [2021-11-02 22:17:39,322 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28130 states and 51141 transitions. [2021-11-02 22:17:39,322 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:39,323 INFO L681 BuchiCegarLoop]: Abstraction has 28130 states and 51141 transitions. [2021-11-02 22:17:39,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28130 states and 51141 transitions. [2021-11-02 22:17:39,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28130 to 16091. [2021-11-02 22:17:39,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16091 states, 16091 states have (on average 1.8007581878068486) internal successors, (28976), 16090 states have internal predecessors, (28976), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:39,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16091 states to 16091 states and 28976 transitions. [2021-11-02 22:17:39,506 INFO L704 BuchiCegarLoop]: Abstraction has 16091 states and 28976 transitions. [2021-11-02 22:17:39,506 INFO L587 BuchiCegarLoop]: Abstraction has 16091 states and 28976 transitions. [2021-11-02 22:17:39,506 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-11-02 22:17:39,506 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16091 states and 28976 transitions. [2021-11-02 22:17:39,546 INFO L131 ngComponentsAnalysis]: Automaton has 90 accepting balls. 4818 [2021-11-02 22:17:39,546 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:17:39,546 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:17:39,547 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:17:39,547 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-11-02 22:17:39,548 INFO L791 eck$LassoCheckResult]: Stem: 1105229#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(32);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(10);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string126.base, #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(93, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string128.base, #t~string128.offset, 1);call write~init~int(93, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(32, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(97, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(116, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(32, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string132.base, #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(10);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string136.base, #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 2 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string138.base, #t~string138.offset, 1);call write~init~int(111, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(119, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(110, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 4 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(73, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(76, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(95, #t~string140.base, 3 + #t~string140.offset, 1);call write~init~int(112, #t~string140.base, 4 + #t~string140.offset, 1);call write~init~int(58, #t~string140.base, 5 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 6 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string152.base, #t~string152.offset, 1);call write~init~int(70, #t~string152.base, 1 + #t~string152.offset, 1);call write~init~int(95, #t~string152.base, 2 + #t~string152.offset, 1);call write~init~int(112, #t~string152.base, 3 + #t~string152.offset, 1);call write~init~int(58, #t~string152.base, 4 + #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 5 + #t~string152.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(37, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(105, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 3 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string169.base, #t~string169.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string169.base, #t~string169.offset, 1);call write~init~int(0, #t~string169.base, 1 + #t~string169.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1103150#L-1 havoc main_#res;havoc main_#t~ret62, main_~retValue_acc~10, main_~tmp~12;havoc main_~retValue_acc~10;havoc main_~tmp~12; 1103151#L1702 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1104330#L1710 main_#t~ret62 := valid_product_#res;main_~tmp~12 := main_#t~ret62;havoc main_#t~ret62; 1101157#L1651 assume 0 != main_~tmp~12; 1101158#L1624 havoc aliceCall_#t~ret51, aliceCall_~tmp~5;havoc aliceCall_~tmp~5;getOrigin_#in~person := 1;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1103809#L564 assume !(0 == getOrigin_~person); 1097928#L568 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~4 := 3;getOrigin_#res := getOrigin_~retValue_acc~4; 1097929#L589 aliceCall_#t~ret51 := getOrigin_#res;aliceCall_~tmp~5 := aliceCall_#t~ret51;havoc aliceCall_#t~ret51;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 1, aliceCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1098492#L999 assume !(0 == initPersonOnFloor_~floor); 1098493#L1026 assume !(1 == initPersonOnFloor_~floor); 1104207#L1053 assume !(2 == initPersonOnFloor_~floor); 1104722#L1080 assume 3 == initPersonOnFloor_~floor; 1101860#L1081 assume !(0 == initPersonOnFloor_~person); 1101861#L1084 assume 1 == initPersonOnFloor_~person;~personOnFloor_1_3~0 := 1; 1099776#L1107-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1096819#L791 assume !(0 == callOnFloor_~floorID); 1096668#L794 assume !(1 == callOnFloor_~floorID); 1096620#L797 assume !(2 == callOnFloor_~floorID); 1096621#L800 assume 3 == callOnFloor_~floorID;~calls_3~0 := 1; 1098528#L803-2 havoc angelinaCall_#t~ret52, angelinaCall_~tmp~6;havoc angelinaCall_~tmp~6;getOrigin_#in~person := 2;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1098529#L564-1 assume !(0 == getOrigin_~person); 1098980#L568-1 assume !(1 == getOrigin_~person); 1098981#L572-1 assume 2 == getOrigin_~person;getOrigin_~retValue_acc~4 := 2;getOrigin_#res := getOrigin_~retValue_acc~4; 1105258#L589-1 angelinaCall_#t~ret52 := getOrigin_#res;angelinaCall_~tmp~6 := angelinaCall_#t~ret52;havoc angelinaCall_#t~ret52;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 2, angelinaCall_~tmp~6;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1102259#L999-1 assume !(0 == initPersonOnFloor_~floor); 1102260#L1026-1 assume !(1 == initPersonOnFloor_~floor); 1103680#L1053-1 assume 2 == initPersonOnFloor_~floor; 1103681#L1054-2 assume !(0 == initPersonOnFloor_~person); 1104328#L1057-2 assume !(1 == initPersonOnFloor_~person); 1102521#L1060-2 assume 2 == initPersonOnFloor_~person;~personOnFloor_2_2~0 := 1; 1102522#L1107-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1105795#L791-2 assume !(0 == callOnFloor_~floorID); 1105793#L794-2 assume !(1 == callOnFloor_~floorID); 1105789#L797-2 assume 2 == callOnFloor_~floorID;~calls_2~0 := 1; 1098148#L803-5 havoc timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_~tmp~26, timeShift_~tmp___0~10, timeShift_~tmp___1~5, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~26;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification13_spec__1_#t~ret42;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1101901#L2015 __utac_acc__Specification13_spec__1_#t~ret42 := getCurrentHeading_#res;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret42;havoc __utac_acc__Specification13_spec__1_#t~ret42; 1097116#L436 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_~retValue_acc~27, stopRequestedAtCurrentFloor_~tmp~24, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~27;havoc stopRequestedAtCurrentFloor_~tmp~24;havoc stopRequestedAtCurrentFloor_~tmp___0~8;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 1097117#L728 assume !(0 == isFloorCalling_~floorID); 1105062#L732 assume !(1 == isFloorCalling_~floorID); 1105063#L736 assume !(2 == isFloorCalling_~floorID); 1104166#L740 assume !(3 == isFloorCalling_~floorID); 1103567#L744 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~6 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 1103568#L755 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 1105839#L3316 stopRequestedAtCurrentFloor_#t~ret97 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~24 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97; 1105767#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1101263#L1963 stopRequestedAtCurrentFloor_#t~ret98 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98; 1100873#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8);stopRequestedAtCurrentFloor_~retValue_acc~27 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~27; 1097914#L2717 timeShift_#t~ret113 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret113;havoc timeShift_#t~ret113; 1097356#L2853 assume !(0 != timeShift_~tmp___9~2); 1097358#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 1097975#L2944-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~23, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~__cil_tmp7~6, stopRequestedInDirection_~__cil_tmp8~7;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~23;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~__cil_tmp7~6;havoc stopRequestedInDirection_~__cil_tmp8~7;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret171, isExecutiveFloorCalling_~retValue_acc~30;havoc isExecutiveFloorCalling_~retValue_acc~30;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~6;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~6; 1097976#L728-3 assume !(0 == isFloorCalling_~floorID); 1105180#L732-3 assume !(1 == isFloorCalling_~floorID); 1098259#L736-3 assume !(2 == isFloorCalling_~floorID); 1098260#L740-3 assume !(3 == isFloorCalling_~floorID); 1100226#L744-3 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~6 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~6; 1100227#L755-3 isExecutiveFloorCalling_#t~ret171 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~30 := isExecutiveFloorCalling_#t~ret171;havoc isExecutiveFloorCalling_#t~ret171;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~30; 1100931#L3316-1 stopRequestedInDirection_#t~ret88 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~5 := stopRequestedInDirection_#t~ret88;havoc stopRequestedInDirection_#t~ret88; 1096985#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1096986#L1963-3 stopRequestedInDirection_#t~ret89 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89;stopRequestedInDirection_~__cil_tmp7~6 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23 := (if stopRequestedInDirection_~__cil_tmp8~7 == stopRequestedInDirection_~__cil_tmp7~6 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~23; 1096738#L2568 timeShift_#t~ret120 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret120;havoc timeShift_#t~ret120; 1096551#L2952 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret91, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 1096553#L2612 assume !(1 == ~currentHeading~0); 1100792#L2622 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1100793#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1102271#L2628-5 havoc __utac_acc__Specification13_spec__2_#t~ret43, __utac_acc__Specification13_spec__2_#t~ret44, __utac_acc__Specification13_spec__2_#t~ret45, __utac_acc__Specification13_spec__2_#t~ret46, __utac_acc__Specification13_spec__2_#t~ret47, __utac_acc__Specification13_spec__2_#t~ret48, __utac_acc__Specification13_spec__2_~tmp~3, __utac_acc__Specification13_spec__2_~tmp___0~0, __utac_acc__Specification13_spec__2_~tmp___1~0, __utac_acc__Specification13_spec__2_~tmp___2~0, __utac_acc__Specification13_spec__2_~tmp___3~0, __utac_acc__Specification13_spec__2_~tmp___4~0, __utac_acc__Specification13_spec__2_~__cil_tmp7~5, __utac_acc__Specification13_spec__2_~__cil_tmp8~5;havoc __utac_acc__Specification13_spec__2_~tmp~3;havoc __utac_acc__Specification13_spec__2_~tmp___0~0;havoc __utac_acc__Specification13_spec__2_~tmp___1~0;havoc __utac_acc__Specification13_spec__2_~tmp___2~0;havoc __utac_acc__Specification13_spec__2_~tmp___3~0;havoc __utac_acc__Specification13_spec__2_~tmp___4~0;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5;__utac_acc__Specification13_spec__2_~__cil_tmp7~5 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5 / 3); 1109359#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5; 1109360#L455 assume 1 == ~prevDir~0;existInLiftCallsInDirection_#in~d := 0;havoc existInLiftCallsInDirection_#res;havoc existInLiftCallsInDirection_~d, existInLiftCallsInDirection_~retValue_acc~29, existInLiftCallsInDirection_~i~1, existInLiftCallsInDirection_~i___0~0;existInLiftCallsInDirection_~d := existInLiftCallsInDirection_#in~d;havoc existInLiftCallsInDirection_~retValue_acc~29;havoc existInLiftCallsInDirection_~i~1;havoc existInLiftCallsInDirection_~i___0~0; 1109362#L3156 assume !(1 == existInLiftCallsInDirection_~d); 1109442#L3222 assume 0 == existInLiftCallsInDirection_~d;existInLiftCallsInDirection_~i___0~0 := 0;existInLiftCallsInDirection_~i___0~0 := ~currentFloorID~0 - 1; 1109441#L3226-2 [2021-11-02 22:17:39,548 INFO L793 eck$LassoCheckResult]: Loop: 1109441#L3226-2 assume !false; 1109438#L3227 assume existInLiftCallsInDirection_~i___0~0 >= 0; 1109424#L3228 existInLiftCallsInDirection_~i___0~0 := 1 + ~currentFloorID~0; 1109421#L3235-2 assume !false; 1109419#L3236 assume !(existInLiftCallsInDirection_~i___0~0 < 5); 1109420#L3294 existInLiftCallsInDirection_~i___0~0 := existInLiftCallsInDirection_~i___0~0 - 1; 1109441#L3226-2 [2021-11-02 22:17:39,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:39,549 INFO L85 PathProgramCache]: Analyzing trace with hash -1563735036, now seen corresponding path program 1 times [2021-11-02 22:17:39,549 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:39,549 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [19387797] [2021-11-02 22:17:39,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:39,549 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:39,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:17:39,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:17:39,611 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:17:39,611 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [19387797] [2021-11-02 22:17:39,611 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [19387797] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:17:39,611 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:17:39,611 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:17:39,611 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [982794413] [2021-11-02 22:17:39,612 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:17:39,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:17:39,612 INFO L85 PathProgramCache]: Analyzing trace with hash 889534507, now seen corresponding path program 16 times [2021-11-02 22:17:39,612 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:17:39,613 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021723711] [2021-11-02 22:17:39,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:17:39,613 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:17:39,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:39,617 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-02 22:17:39,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-02 22:17:39,623 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-02 22:17:39,641 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:17:39,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:17:39,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:17:39,642 INFO L87 Difference]: Start difference. First operand 16091 states and 28976 transitions. cyclomatic complexity: 12979 Second operand has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:51,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:17:51,542 INFO L93 Difference]: Finished difference Result 142537 states and 258410 transitions. [2021-11-02 22:17:51,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-02 22:17:51,542 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 142537 states and 258410 transitions. [2021-11-02 22:17:52,363 INFO L131 ngComponentsAnalysis]: Automaton has 988 accepting balls. 40552 [2021-11-02 22:17:52,716 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 142537 states to 142537 states and 258410 transitions. [2021-11-02 22:17:52,716 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 141777 [2021-11-02 22:17:52,797 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 141777 [2021-11-02 22:17:52,797 INFO L73 IsDeterministic]: Start isDeterministic. Operand 142537 states and 258410 transitions. [2021-11-02 22:17:52,798 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-11-02 22:17:52,798 INFO L681 BuchiCegarLoop]: Abstraction has 142537 states and 258410 transitions. [2021-11-02 22:17:52,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142537 states and 258410 transitions. [2021-11-02 22:17:53,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142537 to 31929. [2021-11-02 22:17:53,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31929 states, 31929 states have (on average 1.8023426978608788) internal successors, (57547), 31928 states have internal predecessors, (57547), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:17:53,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31929 states to 31929 states and 57547 transitions. [2021-11-02 22:17:53,438 INFO L704 BuchiCegarLoop]: Abstraction has 31929 states and 57547 transitions. [2021-11-02 22:17:53,438 INFO L587 BuchiCegarLoop]: Abstraction has 31929 states and 57547 transitions. [2021-11-02 22:17:53,438 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-11-02 22:17:53,439 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31929 states and 57547 transitions.