./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product24.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product24.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 89950477a2818e2be847e3014c0e2f9e906834037b4e328723302699ed4d9564 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:25:22,121 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:25:22,123 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:25:22,153 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:25:22,154 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:25:22,155 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:25:22,157 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:25:22,159 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:25:22,161 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:25:22,162 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:25:22,163 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:25:22,165 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:25:22,165 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:25:22,166 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:25:22,168 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:25:22,169 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:25:22,170 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:25:22,171 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:25:22,173 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:25:22,175 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:25:22,177 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:25:22,178 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:25:22,180 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:25:22,181 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:25:22,184 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:25:22,184 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:25:22,185 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:25:22,186 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:25:22,186 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:25:22,187 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:25:22,187 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:25:22,188 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:25:22,189 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:25:22,190 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:25:22,191 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:25:22,191 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:25:22,192 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:25:22,192 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:25:22,192 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:25:22,193 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:25:22,194 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:25:22,194 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-06 23:25:22,212 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:25:22,212 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:25:22,213 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:25:22,213 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:25:22,213 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:25:22,214 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-06 23:25:22,214 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-06 23:25:22,214 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 23:25:22,215 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:25:22,216 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-06 23:25:22,216 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:25:22,216 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-06 23:25:22,216 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:25:22,216 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:25:22,216 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:25:22,216 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:25:22,216 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:25:22,217 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-06 23:25:22,217 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 89950477a2818e2be847e3014c0e2f9e906834037b4e328723302699ed4d9564 [2021-12-06 23:25:22,400 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:25:22,415 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:25:22,416 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:25:22,417 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:25:22,418 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:25:22,418 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/elevator_spec13_product24.cil.c [2021-12-06 23:25:22,459 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/data/5549be255/16544aca4fb24c76ba51b0ff126cb3f9/FLAGfabc8b4af [2021-12-06 23:25:22,923 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:25:22,923 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/sv-benchmarks/c/product-lines/elevator_spec13_product24.cil.c [2021-12-06 23:25:22,942 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/data/5549be255/16544aca4fb24c76ba51b0ff126cb3f9/FLAGfabc8b4af [2021-12-06 23:25:23,442 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/data/5549be255/16544aca4fb24c76ba51b0ff126cb3f9 [2021-12-06 23:25:23,444 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:25:23,446 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:25:23,450 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:25:23,450 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:25:23,454 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:25:23,455 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:23,456 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@456a4f58 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23, skipping insertion in model container [2021-12-06 23:25:23,456 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:23,462 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:25:23,504 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:25:23,779 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/sv-benchmarks/c/product-lines/elevator_spec13_product24.cil.c[51490,51503] [2021-12-06 23:25:23,804 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:25:23,812 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:25:23,873 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/sv-benchmarks/c/product-lines/elevator_spec13_product24.cil.c[51490,51503] [2021-12-06 23:25:23,887 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:25:23,908 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:25:23,908 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23 WrapperNode [2021-12-06 23:25:23,908 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:25:23,909 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:25:23,909 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:25:23,909 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:25:23,914 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:23,935 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:24,419 INFO L137 Inliner]: procedures = 96, calls = 352, calls flagged for inlining = 204, calls inlined = 1935, statements flattened = 67284 [2021-12-06 23:25:24,419 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:25:24,420 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:25:24,420 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:25:24,420 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:25:24,429 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:24,429 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:24,502 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:24,502 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:24,834 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:25,114 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:25,182 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:25,339 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:25:25,340 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:25:25,340 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:25:25,340 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:25:25,341 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (1/1) ... [2021-12-06 23:25:25,347 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:25,357 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:25,369 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:25,372 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-06 23:25:25,408 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:25:25,408 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:25:25,408 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:25:25,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:25:25,553 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:25:25,554 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:25:36,236 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:25:36,308 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:25:36,309 INFO L301 CfgBuilder]: Removed 61 assume(true) statements. [2021-12-06 23:25:36,324 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:25:36 BoogieIcfgContainer [2021-12-06 23:25:36,324 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:25:36,325 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-06 23:25:36,325 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-06 23:25:36,327 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-06 23:25:36,328 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 23:25:36,328 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 06.12 11:25:23" (1/3) ... [2021-12-06 23:25:36,329 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@39788065 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.12 11:25:36, skipping insertion in model container [2021-12-06 23:25:36,329 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 23:25:36,329 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:23" (2/3) ... [2021-12-06 23:25:36,329 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@39788065 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.12 11:25:36, skipping insertion in model container [2021-12-06 23:25:36,329 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 23:25:36,329 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:25:36" (3/3) ... [2021-12-06 23:25:36,330 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product24.cil.c [2021-12-06 23:25:36,361 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-06 23:25:36,361 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-06 23:25:36,361 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-06 23:25:36,361 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-06 23:25:36,361 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-06 23:25:36,361 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-06 23:25:36,361 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-06 23:25:36,362 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-06 23:25:36,599 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 17942 states, 17941 states have (on average 1.8775430578005685) internal successors, (33685), 17941 states have internal predecessors, (33685), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:36,856 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4074 [2021-12-06 23:25:36,856 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:25:36,856 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:25:36,863 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:36,863 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:36,863 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-06 23:25:36,892 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 17942 states, 17941 states have (on average 1.8775430578005685) internal successors, (33685), 17941 states have internal predecessors, (33685), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:37,056 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4074 [2021-12-06 23:25:37,056 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:25:37,056 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:25:37,058 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:37,058 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:37,063 INFO L791 eck$LassoCheckResult]: Stem: 7238#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 4324#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1353#L3440true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 15646#L3433true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 2934#L3448true main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 17086#L2436true assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 15768#L2410true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 10919#L3343true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1369#L3368true aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10918#L2903true assume 0 == initPersonOnFloor_~floor#1; 5058#L2904true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 12178#L3011-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4415#L2695true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 8113#L2707-2true assume { :end_inline_callOnFloor } true; 17776#L3047true assume { :end_inline_initPersonOnFloor } true; 14484#L2171true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 17527#L3343-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 4159#L3368-1true angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4641#L2903-1true assume 0 == initPersonOnFloor_~floor#1; 1140#L2904-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2972#L3011-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 11532#L2695-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 17871#L2707-5true assume { :end_inline_callOnFloor } true; 16446#L3047-1true assume { :end_inline_initPersonOnFloor } true; 628#L2182true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 6849#L732true __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 4971#L3219true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 10797#L689true timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 17004#L1702true assume 0 != timeShift_~tmp~16#1; 8540#L1703true assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 3722#L1702-1true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1561#L3236true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 7772#L3237true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 17341#L1922true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 13685#L1926-2true [2021-12-06 23:25:37,063 INFO L793 eck$LassoCheckResult]: Loop: 13685#L1926-2true assume !false; 17208#L1927true assume existInLiftCallsInDirection_~i~0#1 < 5; 17553#L1928true assume !(0 == existInLiftCallsInDirection_~i~0#1); 6172#L1941true assume !(1 == existInLiftCallsInDirection_~i~0#1); 17378#L1950true assume !(2 == existInLiftCallsInDirection_~i~0#1); 11303#L1959true assume !(3 == existInLiftCallsInDirection_~i~0#1); 55#L1968true assume !(4 == existInLiftCallsInDirection_~i~0#1); 13116#L1969-1true existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 13685#L1926-2true [2021-12-06 23:25:37,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:37,068 INFO L85 PathProgramCache]: Analyzing trace with hash -1530792437, now seen corresponding path program 1 times [2021-12-06 23:25:37,074 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:37,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1514862985] [2021-12-06 23:25:37,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:37,076 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:37,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:37,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:25:37,269 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:25:37,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1514862985] [2021-12-06 23:25:37,270 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1514862985] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:25:37,270 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:25:37,270 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:25:37,272 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576306430] [2021-12-06 23:25:37,272 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:25:37,277 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:25:37,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:37,278 INFO L85 PathProgramCache]: Analyzing trace with hash 629105533, now seen corresponding path program 1 times [2021-12-06 23:25:37,278 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:37,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725423177] [2021-12-06 23:25:37,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:37,279 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:37,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:37,287 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:25:37,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:37,310 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:25:37,356 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:25:37,357 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:25:37,357 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:25:37,357 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:25:37,357 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 23:25:37,357 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:37,357 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:25:37,357 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:25:37,357 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product24.cil.c_Iteration1_Loop [2021-12-06 23:25:37,357 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:25:37,358 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:25:37,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:37,418 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:25:37,419 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 23:25:37,420 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:37,420 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:37,421 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:37,422 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-06 23:25:37,423 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:25:37,423 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:37,453 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:25:37,453 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:37,453 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:37,454 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:37,455 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-06 23:25:37,456 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 23:25:37,456 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:37,489 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 23:25:37,492 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-06 23:25:37,492 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:25:37,492 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:25:37,492 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:25:37,492 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:25:37,492 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 23:25:37,493 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:37,493 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:25:37,493 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:25:37,493 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product24.cil.c_Iteration1_Loop [2021-12-06 23:25:37,493 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:25:37,493 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:25:37,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:37,528 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:25:37,532 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 23:25:37,533 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:37,533 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:37,534 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:37,535 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-06 23:25:37,536 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:25:37,543 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:25:37,543 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:25:37,544 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:25:37,544 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:25:37,544 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:25:37,546 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:25:37,546 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:25:37,547 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 23:25:37,552 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-06 23:25:37,553 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-06 23:25:37,554 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:37,554 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:37,555 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:37,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-06 23:25:37,568 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 23:25:37,569 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 23:25:37,569 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 23:25:37,570 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2021-12-06 23:25:37,589 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2021-12-06 23:25:37,591 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 23:25:37,608 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:37,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:37,683 INFO L263 TraceCheckSpWp]: Trace formula consists of 545 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:25:37,685 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:37,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:37,746 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:25:37,746 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:37,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:25:37,909 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-06 23:25:37,938 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 17942 states, 17941 states have (on average 1.8775430578005685) internal successors, (33685), 17941 states have internal predecessors, (33685), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:38,835 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2021-12-06 23:25:44,087 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 17942 states, 17941 states have (on average 1.8775430578005685) internal successors, (33685), 17941 states have internal predecessors, (33685), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 211168 states and 396305 transitions. Complement of second has 18 states. [2021-12-06 23:25:44,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-06 23:25:44,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:44,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 215003 transitions. [2021-12-06 23:25:44,263 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 215003 transitions. Stem has 34 letters. Loop has 8 letters. [2021-12-06 23:25:44,264 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:25:44,265 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 215003 transitions. Stem has 42 letters. Loop has 8 letters. [2021-12-06 23:25:44,265 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:25:44,265 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 215003 transitions. Stem has 34 letters. Loop has 16 letters. [2021-12-06 23:25:44,266 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:25:44,266 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 211168 states and 396305 transitions. [2021-12-06 23:25:45,250 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 28744 [2021-12-06 23:25:45,755 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 211168 states to 114441 states and 214726 transitions. [2021-12-06 23:25:45,756 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 114411 [2021-12-06 23:25:45,854 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 114412 [2021-12-06 23:25:45,855 INFO L73 IsDeterministic]: Start isDeterministic. Operand 114441 states and 214726 transitions. [2021-12-06 23:25:45,856 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:25:45,856 INFO L681 BuchiCegarLoop]: Abstraction has 114441 states and 214726 transitions. [2021-12-06 23:25:45,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114441 states and 214726 transitions. [2021-12-06 23:25:46,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114441 to 32264. [2021-12-06 23:25:47,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32264 states, 32264 states have (on average 1.8736982395239277) internal successors, (60453), 32263 states have internal predecessors, (60453), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:47,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32264 states to 32264 states and 60453 transitions. [2021-12-06 23:25:47,098 INFO L704 BuchiCegarLoop]: Abstraction has 32264 states and 60453 transitions. [2021-12-06 23:25:47,098 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:25:47,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:25:47,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:25:47,104 INFO L87 Difference]: Start difference. First operand 32264 states and 60453 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:47,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:25:47,815 INFO L93 Difference]: Finished difference Result 46611 states and 87185 transitions. [2021-12-06 23:25:47,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:25:47,816 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46611 states and 87185 transitions. [2021-12-06 23:25:47,957 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 15474 [2021-12-06 23:25:48,126 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46611 states to 46598 states and 87172 transitions. [2021-12-06 23:25:48,126 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46579 [2021-12-06 23:25:48,167 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46579 [2021-12-06 23:25:48,168 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46598 states and 87172 transitions. [2021-12-06 23:25:48,226 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:25:48,226 INFO L681 BuchiCegarLoop]: Abstraction has 46598 states and 87172 transitions. [2021-12-06 23:25:48,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46598 states and 87172 transitions. [2021-12-06 23:25:48,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46598 to 17939. [2021-12-06 23:25:48,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17939 states, 17939 states have (on average 1.8707285801884164) internal successors, (33559), 17938 states have internal predecessors, (33559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:48,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17939 states to 17939 states and 33559 transitions. [2021-12-06 23:25:48,603 INFO L704 BuchiCegarLoop]: Abstraction has 17939 states and 33559 transitions. [2021-12-06 23:25:48,603 INFO L587 BuchiCegarLoop]: Abstraction has 17939 states and 33559 transitions. [2021-12-06 23:25:48,603 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-06 23:25:48,604 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17939 states and 33559 transitions. [2021-12-06 23:25:48,654 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4074 [2021-12-06 23:25:48,654 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:25:48,655 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:25:48,656 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:48,656 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:48,656 INFO L791 eck$LassoCheckResult]: Stem: 320597#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 316682#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 311374#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 311375#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 314382#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 314383#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 325876#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 323749#L3343 assume !(0 == getOrigin_~person#1); 323750#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 311410#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 311411#L2903 assume 0 == initPersonOnFloor_~floor#1; 317731#L2904 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 310920#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 316810#L2695 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 315734#L2707-2 assume { :end_inline_callOnFloor } true; 321517#L3047 assume { :end_inline_initPersonOnFloor } true; 325559#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 325560#L3343-1 assume !(0 == getOrigin_~person#1); 326087#L3347-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 311052#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 316438#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 310923#L2904-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 308202#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 314447#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 322051#L2707-5 assume { :end_inline_callOnFloor } true; 325984#L3047-1 assume { :end_inline_initPersonOnFloor } true; 309737#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 309738#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 317615#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 317616#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 323662#L1702 assume 0 != timeShift_~tmp~16#1; 321893#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 313285#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 311806#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 311807#L3237 assume !(1 == ~prevDir~0); 310688#L3263 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 310690#L1922-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 322309#L1926-8 [2021-12-06 23:25:48,656 INFO L793 eck$LassoCheckResult]: Loop: 322309#L1926-8 assume !false; 323317#L1927-2 assume existInLiftCallsInDirection_~i~0#1 < 5; 310056#L1928-2 assume !(0 == existInLiftCallsInDirection_~i~0#1); 310058#L1941-2 assume !(1 == existInLiftCallsInDirection_~i~0#1); 320562#L1950-2 assume !(2 == existInLiftCallsInDirection_~i~0#1); 320564#L1959-2 assume !(3 == existInLiftCallsInDirection_~i~0#1); 319255#L1968-2 assume !(4 == existInLiftCallsInDirection_~i~0#1); 318012#L1969-5 existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 322309#L1926-8 [2021-12-06 23:25:48,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:48,657 INFO L85 PathProgramCache]: Analyzing trace with hash 1862527440, now seen corresponding path program 1 times [2021-12-06 23:25:48,657 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:48,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212181402] [2021-12-06 23:25:48,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:48,657 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:48,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:48,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:25:48,715 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:25:48,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212181402] [2021-12-06 23:25:48,715 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212181402] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:25:48,715 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:25:48,715 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:25:48,715 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586413640] [2021-12-06 23:25:48,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:25:48,716 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:25:48,716 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:48,716 INFO L85 PathProgramCache]: Analyzing trace with hash -1588622723, now seen corresponding path program 1 times [2021-12-06 23:25:48,716 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:48,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624789813] [2021-12-06 23:25:48,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:48,717 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:48,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:48,720 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:25:48,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:48,727 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:25:48,751 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:25:48,751 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:25:48,751 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:25:48,751 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:25:48,751 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 23:25:48,751 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:48,752 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:25:48,752 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:25:48,752 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product24.cil.c_Iteration2_Loop [2021-12-06 23:25:48,752 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:25:48,752 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:25:48,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:48,783 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:25:48,784 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 23:25:48,784 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:48,784 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:48,785 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:48,785 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-06 23:25:48,786 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:25:48,786 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:48,811 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2021-12-06 23:25:48,812 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:48,812 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:48,812 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:48,813 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-06 23:25:48,814 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 23:25:48,814 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:48,844 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 23:25:48,846 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2021-12-06 23:25:48,846 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:25:48,846 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:25:48,846 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:25:48,846 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:25:48,846 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 23:25:48,846 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:48,847 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:25:48,847 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:25:48,847 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product24.cil.c_Iteration2_Loop [2021-12-06 23:25:48,847 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:25:48,847 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:25:48,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:48,875 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:25:48,875 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 23:25:48,875 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:48,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:48,876 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:48,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-06 23:25:48,877 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:25:48,884 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:25:48,884 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:25:48,884 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:25:48,884 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:25:48,885 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:25:48,885 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:25:48,885 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:25:48,887 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 23:25:48,889 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-06 23:25:48,889 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-06 23:25:48,890 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:48,890 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:48,892 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:48,893 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-06 23:25:48,893 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 23:25:48,893 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 23:25:48,893 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 23:25:48,894 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2021-12-06 23:25:48,912 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2021-12-06 23:25:48,912 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 23:25:48,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:48,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:48,973 INFO L263 TraceCheckSpWp]: Trace formula consists of 548 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:25:48,974 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:49,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:49,028 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:25:49,028 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:49,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:25:49,136 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-06 23:25:49,137 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 17939 states and 33559 transitions. cyclomatic complexity: 15654 Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:49,541 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-12-06 23:25:54,600 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 17939 states and 33559 transitions. cyclomatic complexity: 15654. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 196607 states and 368829 transitions. Complement of second has 17 states. [2021-12-06 23:25:54,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-06 23:25:54,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:54,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 187736 transitions. [2021-12-06 23:25:54,751 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 187736 transitions. Stem has 37 letters. Loop has 8 letters. [2021-12-06 23:25:54,751 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:25:54,751 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 187736 transitions. Stem has 45 letters. Loop has 8 letters. [2021-12-06 23:25:54,752 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:25:54,752 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 187736 transitions. Stem has 37 letters. Loop has 16 letters. [2021-12-06 23:25:54,752 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:25:54,752 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 196607 states and 368829 transitions. [2021-12-06 23:25:55,386 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 28744 [2021-12-06 23:25:55,950 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 196607 states to 114447 states and 214633 transitions. [2021-12-06 23:25:55,950 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 114398 [2021-12-06 23:25:56,028 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 114399 [2021-12-06 23:25:56,028 INFO L73 IsDeterministic]: Start isDeterministic. Operand 114447 states and 214633 transitions. [2021-12-06 23:25:56,028 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:25:56,028 INFO L681 BuchiCegarLoop]: Abstraction has 114447 states and 214633 transitions. [2021-12-06 23:25:56,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114447 states and 214633 transitions. [2021-12-06 23:25:56,630 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114447 to 17963. [2021-12-06 23:25:56,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17963 states, 17963 states have (on average 1.8703445972276347) internal successors, (33597), 17962 states have internal predecessors, (33597), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:56,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17963 states to 17963 states and 33597 transitions. [2021-12-06 23:25:56,695 INFO L704 BuchiCegarLoop]: Abstraction has 17963 states and 33597 transitions. [2021-12-06 23:25:56,695 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:25:56,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:25:56,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:25:56,696 INFO L87 Difference]: Start difference. First operand 17963 states and 33597 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:57,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:25:57,669 INFO L93 Difference]: Finished difference Result 53672 states and 100361 transitions. [2021-12-06 23:25:57,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:25:57,670 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53672 states and 100361 transitions. [2021-12-06 23:25:57,849 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12234 [2021-12-06 23:25:57,995 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53672 states to 53672 states and 100361 transitions. [2021-12-06 23:25:57,996 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53558 [2021-12-06 23:25:58,026 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53558 [2021-12-06 23:25:58,026 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53672 states and 100361 transitions. [2021-12-06 23:25:58,026 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:25:58,027 INFO L681 BuchiCegarLoop]: Abstraction has 53672 states and 100361 transitions. [2021-12-06 23:25:58,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53672 states and 100361 transitions. [2021-12-06 23:25:58,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53672 to 17978. [2021-12-06 23:25:58,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17978 states, 17978 states have (on average 1.869618422516409) internal successors, (33612), 17977 states have internal predecessors, (33612), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:58,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17978 states to 17978 states and 33612 transitions. [2021-12-06 23:25:58,340 INFO L704 BuchiCegarLoop]: Abstraction has 17978 states and 33612 transitions. [2021-12-06 23:25:58,340 INFO L587 BuchiCegarLoop]: Abstraction has 17978 states and 33612 transitions. [2021-12-06 23:25:58,340 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-06 23:25:58,340 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17978 states and 33612 transitions. [2021-12-06 23:25:58,384 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4078 [2021-12-06 23:25:58,384 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:25:58,384 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:25:58,385 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:58,385 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:58,386 INFO L791 eck$LassoCheckResult]: Stem: 606971#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 603049#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 597739#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 597740#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 600746#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 600747#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 612260#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 610124#L3343 assume !(0 == getOrigin_~person#1); 610125#L3347 assume !(1 == getOrigin_~person#1); 610854#L3351 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 599644#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 612493#L2903 assume 0 == initPersonOnFloor_~floor#1; 604098#L2904 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 597278#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 603176#L2695 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 602098#L2707-2 assume { :end_inline_callOnFloor } true; 607891#L3047 assume { :end_inline_initPersonOnFloor } true; 611941#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 611942#L3343-1 assume !(0 == getOrigin_~person#1); 612474#L3347-1 assume !(1 == getOrigin_~person#1); 597416#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 597417#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 612484#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 597288#L2904-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 594561#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 600811#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 608427#L2707-5 assume { :end_inline_callOnFloor } true; 612367#L3047-1 assume { :end_inline_initPersonOnFloor } true; 596099#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 596100#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 603982#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 603983#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 610039#L1702 assume 0 != timeShift_~tmp~16#1; 608269#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 599651#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 598171#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 598172#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 607563#L1922 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 612468#L1926-2 assume !false; 611604#L1927 [2021-12-06 23:25:58,386 INFO L793 eck$LassoCheckResult]: Loop: 611604#L1927 assume existInLiftCallsInDirection_~i~0#1 < 5; 612457#L1928 assume !(0 == existInLiftCallsInDirection_~i~0#1); 605612#L1941 assume !(1 == existInLiftCallsInDirection_~i~0#1); 605613#L1950 assume 2 == existInLiftCallsInDirection_~i~0#1; 611528#L1952 assume !(0 != ~floorButtons_2~0); 611529#L1959 assume !(3 == existInLiftCallsInDirection_~i~0#1); 602127#L1968 assume !(4 == existInLiftCallsInDirection_~i~0#1); 611383#L1969-1 existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 611384#L1926-2 assume !false; 611604#L1927 [2021-12-06 23:25:58,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:58,386 INFO L85 PathProgramCache]: Analyzing trace with hash 1342134623, now seen corresponding path program 1 times [2021-12-06 23:25:58,386 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:58,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92100948] [2021-12-06 23:25:58,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:58,387 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:58,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:58,425 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:25:58,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:25:58,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [92100948] [2021-12-06 23:25:58,426 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [92100948] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:25:58,426 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:25:58,426 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:25:58,426 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37806535] [2021-12-06 23:25:58,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:25:58,426 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:25:58,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:58,427 INFO L85 PathProgramCache]: Analyzing trace with hash 1854541737, now seen corresponding path program 1 times [2021-12-06 23:25:58,427 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:58,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [445538781] [2021-12-06 23:25:58,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:58,427 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:58,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:58,431 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:25:58,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:58,436 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:25:58,452 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:25:58,452 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:25:58,452 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:25:58,452 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:25:58,452 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 23:25:58,452 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,452 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:25:58,453 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:25:58,453 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product24.cil.c_Iteration3_Loop [2021-12-06 23:25:58,453 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:25:58,453 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:25:58,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:58,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:58,470 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:25:58,471 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 23:25:58,471 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,471 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:58,472 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:58,473 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-12-06 23:25:58,473 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:25:58,473 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:58,482 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-06 23:25:58,482 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~floorButtons_2~0=0} Honda state: {~floorButtons_2~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-06 23:25:58,501 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2021-12-06 23:25:58,502 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,502 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:58,503 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:58,503 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-12-06 23:25:58,504 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:25:58,504 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:58,531 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2021-12-06 23:25:58,531 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,532 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:58,532 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:58,533 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-12-06 23:25:58,533 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 23:25:58,533 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:25:58,542 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 23:25:58,561 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2021-12-06 23:25:58,561 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:25:58,562 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:25:58,562 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:25:58,562 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:25:58,562 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 23:25:58,562 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,562 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:25:58,562 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:25:58,562 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product24.cil.c_Iteration3_Loop [2021-12-06 23:25:58,562 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:25:58,562 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:25:58,563 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:58,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:25:58,580 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:25:58,580 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 23:25:58,580 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,580 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:58,581 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:58,581 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-12-06 23:25:58,582 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:25:58,589 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:25:58,589 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:25:58,589 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:25:58,589 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:25:58,589 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:25:58,590 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:25:58,590 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:25:58,591 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-06 23:25:58,609 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2021-12-06 23:25:58,609 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,609 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:58,610 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:58,611 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-12-06 23:25:58,611 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:25:58,618 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:25:58,618 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:25:58,618 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:25:58,618 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:25:58,618 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:25:58,619 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:25:58,619 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:25:58,622 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 23:25:58,623 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-06 23:25:58,624 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-06 23:25:58,624 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:25:58,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:58,625 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:58,628 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-12-06 23:25:58,628 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 23:25:58,629 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 23:25:58,629 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 23:25:58,629 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -2*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 + 5 Supporting invariants [] [2021-12-06 23:25:58,647 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2021-12-06 23:25:58,647 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 23:25:58,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:58,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:58,702 INFO L263 TraceCheckSpWp]: Trace formula consists of 550 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:25:58,703 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:58,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:58,755 INFO L263 TraceCheckSpWp]: Trace formula consists of 14 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:25:58,756 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:58,810 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:25:58,810 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2021-12-06 23:25:58,810 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 17978 states and 33612 transitions. cyclomatic complexity: 15669 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:25:59,260 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a9dcac0-dce1-45bd-a133-502fb13842bc/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2021-12-06 23:26:00,897 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 17978 states and 33612 transitions. cyclomatic complexity: 15669. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 101482 states and 190121 transitions. Complement of second has 8 states. [2021-12-06 23:26:00,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 2 non-accepting loop states 1 accepting loop states [2021-12-06 23:26:00,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:01,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 111718 transitions. [2021-12-06 23:26:01,003 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 111718 transitions. Stem has 39 letters. Loop has 9 letters. [2021-12-06 23:26:01,003 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:26:01,004 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 111718 transitions. Stem has 48 letters. Loop has 9 letters. [2021-12-06 23:26:01,004 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:26:01,004 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 111718 transitions. Stem has 39 letters. Loop has 18 letters. [2021-12-06 23:26:01,005 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:26:01,005 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 101482 states and 190121 transitions. [2021-12-06 23:26:01,433 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 14944 [2021-12-06 23:26:01,630 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 101482 states to 59725 states and 111856 transitions. [2021-12-06 23:26:01,630 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59647 [2021-12-06 23:26:01,674 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59650 [2021-12-06 23:26:01,674 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59725 states and 111856 transitions. [2021-12-06 23:26:01,702 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:01,702 INFO L681 BuchiCegarLoop]: Abstraction has 59725 states and 111856 transitions. [2021-12-06 23:26:01,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59725 states and 111856 transitions. [2021-12-06 23:26:02,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59725 to 18016. [2021-12-06 23:26:02,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18016 states, 18016 states have (on average 1.8684502664298401) internal successors, (33662), 18015 states have internal predecessors, (33662), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:02,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18016 states to 18016 states and 33662 transitions. [2021-12-06 23:26:02,210 INFO L704 BuchiCegarLoop]: Abstraction has 18016 states and 33662 transitions. [2021-12-06 23:26:02,210 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:02,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:02,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:02,211 INFO L87 Difference]: Start difference. First operand 18016 states and 33662 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:02,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:02,537 INFO L93 Difference]: Finished difference Result 35853 states and 66997 transitions. [2021-12-06 23:26:02,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:02,538 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 35853 states and 66997 transitions. [2021-12-06 23:26:02,666 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 8144 [2021-12-06 23:26:02,763 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 35853 states to 35853 states and 66997 transitions. [2021-12-06 23:26:02,763 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35703 [2021-12-06 23:26:02,788 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35703 [2021-12-06 23:26:02,788 INFO L73 IsDeterministic]: Start isDeterministic. Operand 35853 states and 66997 transitions. [2021-12-06 23:26:02,788 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:02,788 INFO L681 BuchiCegarLoop]: Abstraction has 35853 states and 66997 transitions. [2021-12-06 23:26:02,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35853 states and 66997 transitions. [2021-12-06 23:26:02,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35853 to 17982. [2021-12-06 23:26:03,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17982 states, 17982 states have (on average 1.8682015348682015) internal successors, (33594), 17981 states have internal predecessors, (33594), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:03,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17982 states to 17982 states and 33594 transitions. [2021-12-06 23:26:03,043 INFO L704 BuchiCegarLoop]: Abstraction has 17982 states and 33594 transitions. [2021-12-06 23:26:03,043 INFO L587 BuchiCegarLoop]: Abstraction has 17982 states and 33594 transitions. [2021-12-06 23:26:03,043 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-06 23:26:03,044 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17982 states and 33594 transitions. [2021-12-06 23:26:03,088 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:03,088 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:03,088 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:03,089 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:03,089 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:03,090 INFO L791 eck$LassoCheckResult]: Stem: 780448#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 776537#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 771235#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 771236#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 774239#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 774240#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 785734#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 783596#L3343 assume !(0 == getOrigin_~person#1); 783597#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 771268#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 771269#L2903 assume !(0 == initPersonOnFloor_~floor#1); 779649#L2930 assume !(1 == initPersonOnFloor_~floor#1); 777466#L2957 assume !(2 == initPersonOnFloor_~floor#1); 777467#L2984 assume 3 == initPersonOnFloor_~floor#1; 779498#L2985 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 770834#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 776662#L2695 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 775586#L2707-2 assume { :end_inline_callOnFloor } true; 781366#L3047 assume { :end_inline_initPersonOnFloor } true; 785416#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 785417#L3343-1 assume !(0 == getOrigin_~person#1); 785948#L3347-1 assume !(1 == getOrigin_~person#1); 770912#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 770913#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 785960#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 770783#L2904-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 768059#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 774304#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 781901#L2707-5 assume { :end_inline_callOnFloor } true; 785841#L3047-1 assume { :end_inline_initPersonOnFloor } true; 769597#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 769598#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 777468#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 777469#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 783511#L1702 assume 0 != timeShift_~tmp~16#1; 781744#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 773144#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 771667#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 771668#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 781039#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 782675#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 778637#L1992-2 [2021-12-06 23:26:03,090 INFO L793 eck$LassoCheckResult]: Loop: 778637#L1992-2 assume !false; 774111#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 768199#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 768200#L2001-2 assume !false; 773616#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 778636#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 778637#L1992-2 [2021-12-06 23:26:03,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:03,090 INFO L85 PathProgramCache]: Analyzing trace with hash 332393644, now seen corresponding path program 1 times [2021-12-06 23:26:03,090 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:03,090 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813683782] [2021-12-06 23:26:03,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:03,091 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:03,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:03,127 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:03,127 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:03,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [813683782] [2021-12-06 23:26:03,127 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [813683782] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:03,127 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:03,127 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:03,128 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445397578] [2021-12-06 23:26:03,128 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:03,128 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:03,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:03,128 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 1 times [2021-12-06 23:26:03,128 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:03,128 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239791322] [2021-12-06 23:26:03,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:03,129 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:03,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:03,132 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:03,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:03,136 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:03,148 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:03,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:03,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:03,149 INFO L87 Difference]: Start difference. First operand 17982 states and 33594 transitions. cyclomatic complexity: 15649 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:03,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:03,701 INFO L93 Difference]: Finished difference Result 25122 states and 46942 transitions. [2021-12-06 23:26:03,702 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:03,703 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25122 states and 46942 transitions. [2021-12-06 23:26:03,790 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 7782 [2021-12-06 23:26:03,858 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25122 states to 25122 states and 46942 transitions. [2021-12-06 23:26:03,858 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25047 [2021-12-06 23:26:03,874 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25047 [2021-12-06 23:26:03,874 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25122 states and 46942 transitions. [2021-12-06 23:26:03,874 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:03,874 INFO L681 BuchiCegarLoop]: Abstraction has 25122 states and 46942 transitions. [2021-12-06 23:26:03,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25122 states and 46942 transitions. [2021-12-06 23:26:04,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25122 to 17982. [2021-12-06 23:26:04,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17982 states, 17982 states have (on average 1.867867867867868) internal successors, (33588), 17981 states have internal predecessors, (33588), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:04,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17982 states to 17982 states and 33588 transitions. [2021-12-06 23:26:04,094 INFO L704 BuchiCegarLoop]: Abstraction has 17982 states and 33588 transitions. [2021-12-06 23:26:04,094 INFO L587 BuchiCegarLoop]: Abstraction has 17982 states and 33588 transitions. [2021-12-06 23:26:04,094 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-06 23:26:04,094 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17982 states and 33588 transitions. [2021-12-06 23:26:04,138 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:04,138 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:04,138 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:04,139 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:04,139 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:04,140 INFO L791 eck$LassoCheckResult]: Stem: 823568#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 819654#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 814351#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 814352#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 817357#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 817358#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 828846#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 826715#L3343 assume !(0 == getOrigin_~person#1); 826716#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 814387#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 814388#L2903 assume !(0 == initPersonOnFloor_~floor#1); 822767#L2930 assume !(1 == initPersonOnFloor_~floor#1); 820583#L2957 assume !(2 == initPersonOnFloor_~floor#1); 820584#L2984 assume 3 == initPersonOnFloor_~floor#1; 822616#L2985 assume !(0 == initPersonOnFloor_~person#1); 825716#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 813950#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 819780#L2695 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 818704#L2707-2 assume { :end_inline_callOnFloor } true; 824484#L3047 assume { :end_inline_initPersonOnFloor } true; 828528#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 828529#L3343-1 assume !(0 == getOrigin_~person#1); 829062#L3347-1 assume !(1 == getOrigin_~person#1); 814028#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 814029#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 829088#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 813899#L2904-2 assume !(0 == initPersonOnFloor_~person#1); 811748#L2907-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 811179#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 817422#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 825019#L2707-5 assume { :end_inline_callOnFloor } true; 828954#L3047-1 assume { :end_inline_initPersonOnFloor } true; 812713#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 812714#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 820585#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 820586#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 826629#L1702 assume 0 != timeShift_~tmp~16#1; 824862#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 816260#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 814783#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 814784#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 824157#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 825794#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 821754#L1992-2 [2021-12-06 23:26:04,140 INFO L793 eck$LassoCheckResult]: Loop: 821754#L1992-2 assume !false; 817227#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 811315#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 811316#L2001-2 assume !false; 816732#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 821753#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 821754#L1992-2 [2021-12-06 23:26:04,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:04,140 INFO L85 PathProgramCache]: Analyzing trace with hash 553838192, now seen corresponding path program 1 times [2021-12-06 23:26:04,140 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:04,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [688971632] [2021-12-06 23:26:04,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:04,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:04,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:04,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:04,172 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:04,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [688971632] [2021-12-06 23:26:04,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [688971632] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:04,172 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:04,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:04,172 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [87345504] [2021-12-06 23:26:04,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:04,173 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:04,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:04,173 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 2 times [2021-12-06 23:26:04,173 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:04,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1806673815] [2021-12-06 23:26:04,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:04,173 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:04,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:04,176 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:04,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:04,180 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:04,193 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:04,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:04,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:04,194 INFO L87 Difference]: Start difference. First operand 17982 states and 33588 transitions. cyclomatic complexity: 15643 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:04,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:04,979 INFO L93 Difference]: Finished difference Result 53745 states and 100425 transitions. [2021-12-06 23:26:04,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:04,980 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53745 states and 100425 transitions. [2021-12-06 23:26:05,160 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12216 [2021-12-06 23:26:05,304 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53745 states to 53745 states and 100425 transitions. [2021-12-06 23:26:05,305 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53520 [2021-12-06 23:26:05,337 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53520 [2021-12-06 23:26:05,337 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53745 states and 100425 transitions. [2021-12-06 23:26:05,338 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:05,338 INFO L681 BuchiCegarLoop]: Abstraction has 53745 states and 100425 transitions. [2021-12-06 23:26:05,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53745 states and 100425 transitions. [2021-12-06 23:26:05,574 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53745 to 17986. [2021-12-06 23:26:05,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17986 states, 17986 states have (on average 1.8676192594239964) internal successors, (33591), 17985 states have internal predecessors, (33591), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:05,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17986 states to 17986 states and 33591 transitions. [2021-12-06 23:26:05,628 INFO L704 BuchiCegarLoop]: Abstraction has 17986 states and 33591 transitions. [2021-12-06 23:26:05,628 INFO L587 BuchiCegarLoop]: Abstraction has 17986 states and 33591 transitions. [2021-12-06 23:26:05,628 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-06 23:26:05,628 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17986 states and 33591 transitions. [2021-12-06 23:26:05,673 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:05,673 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:05,673 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:05,673 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:05,674 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:05,674 INFO L791 eck$LassoCheckResult]: Stem: 895303#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 891392#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 886089#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 886090#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 889094#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 889095#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 900591#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 898451#L3343 assume !(0 == getOrigin_~person#1); 898452#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 886122#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 886123#L2903 assume !(0 == initPersonOnFloor_~floor#1); 894504#L2930 assume !(1 == initPersonOnFloor_~floor#1); 892321#L2957 assume !(2 == initPersonOnFloor_~floor#1); 892322#L2984 assume 3 == initPersonOnFloor_~floor#1; 894353#L2985 assume !(0 == initPersonOnFloor_~person#1); 897453#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 885688#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891517#L2695 assume !(0 == callOnFloor_~floorID#1); 891518#L2698 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 890441#L2707-2 assume { :end_inline_callOnFloor } true; 896221#L3047 assume { :end_inline_initPersonOnFloor } true; 900272#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 900273#L3343-1 assume !(0 == getOrigin_~person#1); 900805#L3347-1 assume !(1 == getOrigin_~person#1); 885766#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 885767#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 900816#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 885637#L2904-2 assume !(0 == initPersonOnFloor_~person#1); 883485#L2907-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 883487#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 889159#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 896756#L2707-5 assume { :end_inline_callOnFloor } true; 900698#L3047-1 assume { :end_inline_initPersonOnFloor } true; 884451#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 884452#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 892323#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 892324#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 898366#L1702 assume 0 != timeShift_~tmp~16#1; 896599#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 887999#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 886521#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 886522#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 895894#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 897530#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 893492#L1992-2 [2021-12-06 23:26:05,674 INFO L793 eck$LassoCheckResult]: Loop: 893492#L1992-2 assume !false; 888966#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 883052#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 883053#L2001-2 assume !false; 888471#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 893491#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 893492#L1992-2 [2021-12-06 23:26:05,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:05,674 INFO L85 PathProgramCache]: Analyzing trace with hash -1251686709, now seen corresponding path program 1 times [2021-12-06 23:26:05,674 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:05,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2001702061] [2021-12-06 23:26:05,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:05,675 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:05,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:05,704 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:05,704 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:05,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2001702061] [2021-12-06 23:26:05,705 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2001702061] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:05,705 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:05,705 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:05,705 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621108995] [2021-12-06 23:26:05,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:05,705 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:05,705 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:05,705 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 3 times [2021-12-06 23:26:05,705 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:05,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [920253596] [2021-12-06 23:26:05,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:05,706 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:05,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:05,708 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:05,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:05,712 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:05,726 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:05,726 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:05,726 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:05,726 INFO L87 Difference]: Start difference. First operand 17986 states and 33591 transitions. cyclomatic complexity: 15642 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:06,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:06,426 INFO L93 Difference]: Finished difference Result 53750 states and 100427 transitions. [2021-12-06 23:26:06,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:06,428 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53750 states and 100427 transitions. [2021-12-06 23:26:06,697 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12216 [2021-12-06 23:26:06,836 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53750 states to 53750 states and 100427 transitions. [2021-12-06 23:26:06,836 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53525 [2021-12-06 23:26:06,867 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53525 [2021-12-06 23:26:06,867 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53750 states and 100427 transitions. [2021-12-06 23:26:06,885 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:06,885 INFO L681 BuchiCegarLoop]: Abstraction has 53750 states and 100427 transitions. [2021-12-06 23:26:06,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53750 states and 100427 transitions. [2021-12-06 23:26:07,119 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53750 to 17992. [2021-12-06 23:26:07,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17992 states, 17992 states have (on average 1.867274344152957) internal successors, (33596), 17991 states have internal predecessors, (33596), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:07,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17992 states to 17992 states and 33596 transitions. [2021-12-06 23:26:07,174 INFO L704 BuchiCegarLoop]: Abstraction has 17992 states and 33596 transitions. [2021-12-06 23:26:07,174 INFO L587 BuchiCegarLoop]: Abstraction has 17992 states and 33596 transitions. [2021-12-06 23:26:07,174 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-06 23:26:07,174 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17992 states and 33596 transitions. [2021-12-06 23:26:07,218 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:07,218 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:07,219 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:07,219 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:07,219 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:07,219 INFO L791 eck$LassoCheckResult]: Stem: 967052#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 963139#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 957834#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 957835#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 960842#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 960843#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 972338#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 970202#L3343 assume !(0 == getOrigin_~person#1); 970203#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 957869#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 957870#L2903 assume !(0 == initPersonOnFloor_~floor#1); 966253#L2930 assume !(1 == initPersonOnFloor_~floor#1); 964068#L2957 assume !(2 == initPersonOnFloor_~floor#1); 964069#L2984 assume 3 == initPersonOnFloor_~floor#1; 966102#L2985 assume !(0 == initPersonOnFloor_~person#1); 969203#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 957433#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 963265#L2695 assume !(0 == callOnFloor_~floorID#1); 963266#L2698 assume !(1 == callOnFloor_~floorID#1); 963007#L2701 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 962189#L2707-2 assume { :end_inline_callOnFloor } true; 967970#L3047 assume { :end_inline_initPersonOnFloor } true; 972020#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 972021#L3343-1 assume !(0 == getOrigin_~person#1); 972552#L3347-1 assume !(1 == getOrigin_~person#1); 957511#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 957512#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 972562#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 957382#L2904-2 assume !(0 == initPersonOnFloor_~person#1); 955230#L2907-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 955232#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 972592#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 968732#L2707-5 assume { :end_inline_callOnFloor } true; 972446#L3047-1 assume { :end_inline_initPersonOnFloor } true; 956196#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 956197#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 964070#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 964071#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 970116#L1702 assume 0 != timeShift_~tmp~16#1; 968348#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 959747#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 958266#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 958267#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 967643#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 969280#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 965239#L1992-2 [2021-12-06 23:26:07,220 INFO L793 eck$LassoCheckResult]: Loop: 965239#L1992-2 assume !false; 960712#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 954797#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 954798#L2001-2 assume !false; 960216#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 965238#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 965239#L1992-2 [2021-12-06 23:26:07,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:07,220 INFO L85 PathProgramCache]: Analyzing trace with hash -1233284757, now seen corresponding path program 1 times [2021-12-06 23:26:07,220 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:07,220 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133435837] [2021-12-06 23:26:07,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:07,220 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:07,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:07,250 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:07,250 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:07,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133435837] [2021-12-06 23:26:07,250 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133435837] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:07,250 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:07,250 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:07,250 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [875616802] [2021-12-06 23:26:07,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:07,250 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:07,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:07,251 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 4 times [2021-12-06 23:26:07,251 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:07,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [880392274] [2021-12-06 23:26:07,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:07,251 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:07,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:07,254 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:07,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:07,257 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:07,270 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:07,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:07,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:07,270 INFO L87 Difference]: Start difference. First operand 17992 states and 33596 transitions. cyclomatic complexity: 15641 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:07,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:07,976 INFO L93 Difference]: Finished difference Result 53757 states and 100431 transitions. [2021-12-06 23:26:07,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:07,977 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53757 states and 100431 transitions. [2021-12-06 23:26:08,182 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12216 [2021-12-06 23:26:08,450 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53757 states to 53757 states and 100431 transitions. [2021-12-06 23:26:08,450 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53532 [2021-12-06 23:26:08,483 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53532 [2021-12-06 23:26:08,483 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53757 states and 100431 transitions. [2021-12-06 23:26:08,484 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:08,484 INFO L681 BuchiCegarLoop]: Abstraction has 53757 states and 100431 transitions. [2021-12-06 23:26:08,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53757 states and 100431 transitions. [2021-12-06 23:26:08,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53757 to 18000. [2021-12-06 23:26:08,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18000 states, 18000 states have (on average 1.8668333333333333) internal successors, (33603), 17999 states have internal predecessors, (33603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:08,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18000 states to 18000 states and 33603 transitions. [2021-12-06 23:26:08,817 INFO L704 BuchiCegarLoop]: Abstraction has 18000 states and 33603 transitions. [2021-12-06 23:26:08,818 INFO L587 BuchiCegarLoop]: Abstraction has 18000 states and 33603 transitions. [2021-12-06 23:26:08,818 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-06 23:26:08,818 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18000 states and 33603 transitions. [2021-12-06 23:26:08,875 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:08,875 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:08,875 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:08,875 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:08,876 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:08,876 INFO L791 eck$LassoCheckResult]: Stem: 1038811#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1034898#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1029593#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1029594#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1032599#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1032600#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1044093#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1041960#L3343 assume !(0 == getOrigin_~person#1); 1041961#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1029626#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1029627#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1038012#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1035827#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1035828#L2984 assume 3 == initPersonOnFloor_~floor#1; 1037861#L2985 assume !(0 == initPersonOnFloor_~person#1); 1040961#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1029191#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1035023#L2695 assume !(0 == callOnFloor_~floorID#1); 1035024#L2698 assume !(1 == callOnFloor_~floorID#1); 1034766#L2701 assume !(2 == callOnFloor_~floorID#1); 1034767#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1033946#L2707-2 assume { :end_inline_callOnFloor } true; 1039729#L3047 assume { :end_inline_initPersonOnFloor } true; 1043774#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1043775#L3343-1 assume !(0 == getOrigin_~person#1); 1044309#L3347-1 assume !(1 == getOrigin_~person#1); 1029270#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1029271#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1044320#L2903-1 assume 0 == initPersonOnFloor_~floor#1; 1029140#L2904-2 assume !(0 == initPersonOnFloor_~person#1); 1026987#L2907-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 1026989#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1044351#L2695-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1041140#L2707-5 assume { :end_inline_callOnFloor } true; 1044202#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1027953#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1027954#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1035829#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1035830#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1041875#L1702 assume 0 != timeShift_~tmp~16#1; 1040107#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1031503#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1030025#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1030026#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1039402#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1041038#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1036998#L1992-2 [2021-12-06 23:26:08,876 INFO L793 eck$LassoCheckResult]: Loop: 1036998#L1992-2 assume !false; 1032471#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1026554#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1026555#L2001-2 assume !false; 1031975#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1036997#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1036998#L1992-2 [2021-12-06 23:26:08,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:08,876 INFO L85 PathProgramCache]: Analyzing trace with hash -507725210, now seen corresponding path program 1 times [2021-12-06 23:26:08,876 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:08,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1894285509] [2021-12-06 23:26:08,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:08,877 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:08,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:08,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:08,915 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:08,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1894285509] [2021-12-06 23:26:08,915 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1894285509] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:08,915 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:08,915 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:08,915 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1847093963] [2021-12-06 23:26:08,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:08,916 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:08,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:08,916 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 5 times [2021-12-06 23:26:08,916 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:08,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [664019653] [2021-12-06 23:26:08,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:08,916 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:08,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:08,919 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:08,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:08,923 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:08,937 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:08,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:08,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:08,937 INFO L87 Difference]: Start difference. First operand 18000 states and 33603 transitions. cyclomatic complexity: 15640 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:09,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:09,720 INFO L93 Difference]: Finished difference Result 39476 states and 73760 transitions. [2021-12-06 23:26:09,720 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:26:09,720 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39476 states and 73760 transitions. [2021-12-06 23:26:09,857 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 15202 [2021-12-06 23:26:09,963 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39476 states to 39476 states and 73760 transitions. [2021-12-06 23:26:09,963 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39401 [2021-12-06 23:26:09,990 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39401 [2021-12-06 23:26:09,990 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39476 states and 73760 transitions. [2021-12-06 23:26:10,145 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:10,146 INFO L681 BuchiCegarLoop]: Abstraction has 39476 states and 73760 transitions. [2021-12-06 23:26:10,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39476 states and 73760 transitions. [2021-12-06 23:26:10,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39476 to 17986. [2021-12-06 23:26:10,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17986 states, 17986 states have (on average 1.8668408762370732) internal successors, (33577), 17985 states have internal predecessors, (33577), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:10,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17986 states to 17986 states and 33577 transitions. [2021-12-06 23:26:10,378 INFO L704 BuchiCegarLoop]: Abstraction has 17986 states and 33577 transitions. [2021-12-06 23:26:10,378 INFO L587 BuchiCegarLoop]: Abstraction has 17986 states and 33577 transitions. [2021-12-06 23:26:10,378 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-06 23:26:10,378 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17986 states and 33577 transitions. [2021-12-06 23:26:10,422 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:10,423 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:10,423 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:10,423 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:10,423 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:10,423 INFO L791 eck$LassoCheckResult]: Stem: 1096293#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1092382#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1087078#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1087079#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1090086#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1090087#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1101580#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1099442#L3343 assume !(0 == getOrigin_~person#1); 1099443#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1087114#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1087115#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1095494#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1093311#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1093312#L2984 assume 3 == initPersonOnFloor_~floor#1; 1095343#L2985 assume !(0 == initPersonOnFloor_~person#1); 1098441#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1086677#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1092508#L2695 assume !(0 == callOnFloor_~floorID#1); 1092509#L2698 assume !(1 == callOnFloor_~floorID#1); 1092250#L2701 assume !(2 == callOnFloor_~floorID#1); 1092251#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1091433#L2707-2 assume { :end_inline_callOnFloor } true; 1097210#L3047 assume { :end_inline_initPersonOnFloor } true; 1101262#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1101263#L3343-1 assume !(0 == getOrigin_~person#1); 1101795#L3347-1 assume !(1 == getOrigin_~person#1); 1086756#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1086757#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1092138#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1092832#L2930-1 assume 1 == initPersonOnFloor_~floor#1; 1101681#L2931-2 assume !(0 == initPersonOnFloor_~person#1); 1101403#L2934-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 1094664#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1101809#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1101806#L2698-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1098620#L2707-5 assume { :end_inline_callOnFloor } true; 1101689#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1085442#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1085443#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1093313#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1093314#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1099356#L1702 assume 0 != timeShift_~tmp~16#1; 1097588#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1088991#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1087510#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1087511#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1096884#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1098518#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1094481#L1992-2 [2021-12-06 23:26:10,424 INFO L793 eck$LassoCheckResult]: Loop: 1094481#L1992-2 assume !false; 1089956#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1084046#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1084047#L2001-2 assume !false; 1089460#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1094480#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1094481#L1992-2 [2021-12-06 23:26:10,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:10,424 INFO L85 PathProgramCache]: Analyzing trace with hash 1319509436, now seen corresponding path program 1 times [2021-12-06 23:26:10,424 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:10,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [838639523] [2021-12-06 23:26:10,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:10,424 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:10,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:10,455 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:10,456 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:10,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [838639523] [2021-12-06 23:26:10,456 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [838639523] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:10,456 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:10,456 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:10,456 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1112152374] [2021-12-06 23:26:10,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:10,456 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:10,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:10,457 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 6 times [2021-12-06 23:26:10,457 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:10,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770237908] [2021-12-06 23:26:10,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:10,457 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:10,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:10,460 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:10,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:10,463 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:10,475 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:10,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:10,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:10,476 INFO L87 Difference]: Start difference. First operand 17986 states and 33577 transitions. cyclomatic complexity: 15628 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:11,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:11,081 INFO L93 Difference]: Finished difference Result 39450 states and 73711 transitions. [2021-12-06 23:26:11,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:26:11,081 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39450 states and 73711 transitions. [2021-12-06 23:26:11,219 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 15202 [2021-12-06 23:26:11,324 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39450 states to 39450 states and 73711 transitions. [2021-12-06 23:26:11,324 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39375 [2021-12-06 23:26:11,351 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39375 [2021-12-06 23:26:11,352 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39450 states and 73711 transitions. [2021-12-06 23:26:11,366 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:11,367 INFO L681 BuchiCegarLoop]: Abstraction has 39450 states and 73711 transitions. [2021-12-06 23:26:11,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39450 states and 73711 transitions. [2021-12-06 23:26:11,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39450 to 17980. [2021-12-06 23:26:11,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17980 states, 17980 states have (on average 1.8667408231368188) internal successors, (33564), 17979 states have internal predecessors, (33564), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:11,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17980 states to 17980 states and 33564 transitions. [2021-12-06 23:26:11,633 INFO L704 BuchiCegarLoop]: Abstraction has 17980 states and 33564 transitions. [2021-12-06 23:26:11,633 INFO L587 BuchiCegarLoop]: Abstraction has 17980 states and 33564 transitions. [2021-12-06 23:26:11,633 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-06 23:26:11,633 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17980 states and 33564 transitions. [2021-12-06 23:26:11,728 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:11,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:11,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:11,729 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:11,729 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:11,729 INFO L791 eck$LassoCheckResult]: Stem: 1153741#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1149834#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1144530#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1144531#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1147536#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1147537#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1159022#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1156890#L3343 assume !(0 == getOrigin_~person#1); 1156891#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1144565#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1144566#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1152942#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1150763#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1150764#L2984 assume 3 == initPersonOnFloor_~floor#1; 1152791#L2985 assume !(0 == initPersonOnFloor_~person#1); 1155888#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1144129#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1149959#L2695 assume !(0 == callOnFloor_~floorID#1); 1149960#L2698 assume !(1 == callOnFloor_~floorID#1); 1149702#L2701 assume !(2 == callOnFloor_~floorID#1); 1149703#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1148885#L2707-2 assume { :end_inline_callOnFloor } true; 1154658#L3047 assume { :end_inline_initPersonOnFloor } true; 1158705#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1158706#L3343-1 assume !(0 == getOrigin_~person#1); 1159236#L3347-1 assume !(1 == getOrigin_~person#1); 1144208#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1144209#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1149590#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1150284#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1156273#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1146986#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1141361#L2961-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 1141362#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1159257#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1159256#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1159255#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1156067#L2707-5 assume { :end_inline_callOnFloor } true; 1159130#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1142894#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1142895#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1150765#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1150766#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1156803#L1702 assume 0 != timeShift_~tmp~16#1; 1155036#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1146440#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1144962#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1144963#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1154332#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1155965#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1151933#L1992-2 [2021-12-06 23:26:11,729 INFO L793 eck$LassoCheckResult]: Loop: 1151933#L1992-2 assume !false; 1147408#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1141498#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1141499#L2001-2 assume !false; 1146912#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1151932#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1151933#L1992-2 [2021-12-06 23:26:11,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:11,730 INFO L85 PathProgramCache]: Analyzing trace with hash 1479862237, now seen corresponding path program 1 times [2021-12-06 23:26:11,730 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:11,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1685989260] [2021-12-06 23:26:11,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:11,730 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:11,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:11,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:11,761 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:11,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1685989260] [2021-12-06 23:26:11,762 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1685989260] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:11,762 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:11,762 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:11,762 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165187736] [2021-12-06 23:26:11,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:11,762 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:11,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:11,763 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 7 times [2021-12-06 23:26:11,763 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:11,763 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333814615] [2021-12-06 23:26:11,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:11,763 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:11,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:11,766 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:11,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:11,769 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:11,780 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:11,780 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:11,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:11,781 INFO L87 Difference]: Start difference. First operand 17980 states and 33564 transitions. cyclomatic complexity: 15621 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:12,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:12,170 INFO L93 Difference]: Finished difference Result 25161 states and 46969 transitions. [2021-12-06 23:26:12,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:12,171 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25161 states and 46969 transitions. [2021-12-06 23:26:12,262 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 7782 [2021-12-06 23:26:12,332 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25161 states to 25161 states and 46969 transitions. [2021-12-06 23:26:12,332 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25086 [2021-12-06 23:26:12,348 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25086 [2021-12-06 23:26:12,348 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25161 states and 46969 transitions. [2021-12-06 23:26:12,351 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:12,351 INFO L681 BuchiCegarLoop]: Abstraction has 25161 states and 46969 transitions. [2021-12-06 23:26:12,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25161 states and 46969 transitions. [2021-12-06 23:26:12,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25161 to 17980. [2021-12-06 23:26:12,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17980 states, 17980 states have (on average 1.8662958843159065) internal successors, (33556), 17979 states have internal predecessors, (33556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:12,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17980 states to 17980 states and 33556 transitions. [2021-12-06 23:26:12,571 INFO L704 BuchiCegarLoop]: Abstraction has 17980 states and 33556 transitions. [2021-12-06 23:26:12,571 INFO L587 BuchiCegarLoop]: Abstraction has 17980 states and 33556 transitions. [2021-12-06 23:26:12,571 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-06 23:26:12,571 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17980 states and 33556 transitions. [2021-12-06 23:26:12,615 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4072 [2021-12-06 23:26:12,616 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:12,616 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:12,616 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:12,616 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:12,617 INFO L791 eck$LassoCheckResult]: Stem: 1196891#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1192983#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1187681#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1187682#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1190686#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1190687#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1202179#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1200041#L3343 assume !(0 == getOrigin_~person#1); 1200042#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1187716#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1187717#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1196092#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1193913#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1193914#L2984 assume 3 == initPersonOnFloor_~floor#1; 1195941#L2985 assume !(0 == initPersonOnFloor_~person#1); 1199040#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1187280#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1193108#L2695 assume !(0 == callOnFloor_~floorID#1); 1193109#L2698 assume !(1 == callOnFloor_~floorID#1); 1192851#L2701 assume !(2 == callOnFloor_~floorID#1); 1192852#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1192033#L2707-2 assume { :end_inline_callOnFloor } true; 1197809#L3047 assume { :end_inline_initPersonOnFloor } true; 1201862#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1201863#L3343-1 assume !(0 == getOrigin_~person#1); 1202391#L3347-1 assume !(1 == getOrigin_~person#1); 1187359#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1187360#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1192739#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1193433#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1199425#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1190136#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1184509#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 1184510#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1193778#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1202404#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1202403#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1202402#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1199219#L2707-5 assume { :end_inline_callOnFloor } true; 1202286#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1186045#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1186046#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1193915#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1193916#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1199955#L1702 assume 0 != timeShift_~tmp~16#1; 1198187#L1703 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1189590#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1188113#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1188114#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1197483#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1199117#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1195083#L1992-2 [2021-12-06 23:26:12,617 INFO L793 eck$LassoCheckResult]: Loop: 1195083#L1992-2 assume !false; 1190558#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1184649#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1184650#L2001-2 assume !false; 1190062#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1195082#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1195083#L1992-2 [2021-12-06 23:26:12,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:12,617 INFO L85 PathProgramCache]: Analyzing trace with hash -1525038236, now seen corresponding path program 1 times [2021-12-06 23:26:12,617 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:12,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025365798] [2021-12-06 23:26:12,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:12,618 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:12,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:12,659 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:12,659 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:12,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025365798] [2021-12-06 23:26:12,659 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025365798] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:12,659 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:12,659 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:12,659 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [410154772] [2021-12-06 23:26:12,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:12,660 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:12,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:12,660 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 8 times [2021-12-06 23:26:12,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:12,660 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1667669313] [2021-12-06 23:26:12,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:12,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:12,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:12,663 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:12,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:12,666 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:12,679 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:12,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:12,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:12,680 INFO L87 Difference]: Start difference. First operand 17980 states and 33556 transitions. cyclomatic complexity: 15613 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:13,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:13,334 INFO L93 Difference]: Finished difference Result 33972 states and 63522 transitions. [2021-12-06 23:26:13,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:13,334 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33972 states and 63522 transitions. [2021-12-06 23:26:13,451 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7112 [2021-12-06 23:26:13,542 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33972 states to 33972 states and 63522 transitions. [2021-12-06 23:26:13,542 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33822 [2021-12-06 23:26:13,565 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33822 [2021-12-06 23:26:13,565 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33972 states and 63522 transitions. [2021-12-06 23:26:13,566 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:13,566 INFO L681 BuchiCegarLoop]: Abstraction has 33972 states and 63522 transitions. [2021-12-06 23:26:13,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33972 states and 63522 transitions. [2021-12-06 23:26:13,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33972 to 28960. [2021-12-06 23:26:13,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28960 states, 28960 states have (on average 1.865814917127072) internal successors, (54034), 28959 states have internal predecessors, (54034), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:13,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28960 states to 28960 states and 54034 transitions. [2021-12-06 23:26:13,903 INFO L704 BuchiCegarLoop]: Abstraction has 28960 states and 54034 transitions. [2021-12-06 23:26:13,903 INFO L587 BuchiCegarLoop]: Abstraction has 28960 states and 54034 transitions. [2021-12-06 23:26:13,904 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-06 23:26:13,904 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28960 states and 54034 transitions. [2021-12-06 23:26:14,001 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7112 [2021-12-06 23:26:14,002 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:14,002 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:14,002 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:14,002 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:14,003 INFO L791 eck$LassoCheckResult]: Stem: 1248898#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1244963#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1239640#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1239641#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1242656#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1242657#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1254337#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1252112#L3343 assume !(0 == getOrigin_~person#1); 1252113#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1239673#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239674#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1248091#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1245896#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1245897#L2984 assume 3 == initPersonOnFloor_~floor#1; 1247939#L2985 assume !(0 == initPersonOnFloor_~person#1); 1251090#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1239239#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1245090#L2695 assume !(0 == callOnFloor_~floorID#1); 1245091#L2698 assume !(1 == callOnFloor_~floorID#1); 1244831#L2701 assume !(2 == callOnFloor_~floorID#1); 1244832#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1244009#L2707-2 assume { :end_inline_callOnFloor } true; 1249836#L3047 assume { :end_inline_initPersonOnFloor } true; 1253983#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1253984#L3343-1 assume !(0 == getOrigin_~person#1); 1254579#L3347-1 assume !(1 == getOrigin_~person#1); 1239318#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1239319#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1244717#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1245415#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1251484#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1242101#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1236467#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 1236468#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1245761#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1254598#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1254597#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1254596#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1251275#L2707-5 assume { :end_inline_callOnFloor } true; 1254460#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1238002#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1238003#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1245898#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1245899#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1252024#L1702 assume !(0 != timeShift_~tmp~16#1);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1252310#L2632-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1240816#L2659-65 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1241417#L2082-3 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 1243618#L1417-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1243619#L680-5 stopRequestedAtCurrentFloor_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1243813#L1421-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1248556#L1434-1 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 1249950#L1569-2 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1247999#L1660-3 assume !(1 == ~doorState~0); 1248000#L1660-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1240543#L2632-68 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1240544#L2659-68 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1241430#L2082-4 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 1251375#L1272-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1252292#L680-8 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1252293#L1285-2 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 1251175#L1668-2 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1251177#L1329-3 assume !(1 == ~currentHeading~0); 1243359#L1339-9 assume !(0 == ~currentFloorID~0); 1243360#L1339-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1248085#L1345-7 assume { :end_inline_continueInDirection } true; 1241553#L1677-5 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1241554#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1240072#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1240073#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1249503#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1251170#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1247072#L1992-2 [2021-12-06 23:26:14,003 INFO L793 eck$LassoCheckResult]: Loop: 1247072#L1992-2 assume !false; 1242528#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1236606#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1236607#L2001-2 assume !false; 1242028#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1247071#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1247072#L1992-2 [2021-12-06 23:26:14,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:14,004 INFO L85 PathProgramCache]: Analyzing trace with hash 401192103, now seen corresponding path program 1 times [2021-12-06 23:26:14,004 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:14,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1941754611] [2021-12-06 23:26:14,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:14,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:14,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:14,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:14,051 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:14,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1941754611] [2021-12-06 23:26:14,051 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1941754611] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:14,051 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:14,051 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 23:26:14,051 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551382008] [2021-12-06 23:26:14,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:14,051 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:14,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:14,052 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 9 times [2021-12-06 23:26:14,052 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:14,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788004207] [2021-12-06 23:26:14,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:14,052 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:14,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:14,055 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:14,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:14,057 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:14,069 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:14,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:26:14,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:26:14,070 INFO L87 Difference]: Start difference. First operand 28960 states and 54034 transitions. cyclomatic complexity: 25148 Second operand has 8 states, 8 states have (on average 9.0) internal successors, (72), 7 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:14,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:14,993 INFO L93 Difference]: Finished difference Result 48801 states and 89706 transitions. [2021-12-06 23:26:14,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:26:14,994 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48801 states and 89706 transitions. [2021-12-06 23:26:15,167 INFO L131 ngComponentsAnalysis]: Automaton has 332 accepting balls. 17608 [2021-12-06 23:26:15,293 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48801 states to 48801 states and 89706 transitions. [2021-12-06 23:26:15,293 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48576 [2021-12-06 23:26:15,326 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48576 [2021-12-06 23:26:15,326 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48801 states and 89706 transitions. [2021-12-06 23:26:15,328 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:15,329 INFO L681 BuchiCegarLoop]: Abstraction has 48801 states and 89706 transitions. [2021-12-06 23:26:15,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48801 states and 89706 transitions. [2021-12-06 23:26:15,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48801 to 28244. [2021-12-06 23:26:15,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28244 states, 28244 states have (on average 1.8500212434499363) internal successors, (52252), 28243 states have internal predecessors, (52252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:15,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28244 states to 28244 states and 52252 transitions. [2021-12-06 23:26:15,820 INFO L704 BuchiCegarLoop]: Abstraction has 28244 states and 52252 transitions. [2021-12-06 23:26:15,820 INFO L587 BuchiCegarLoop]: Abstraction has 28244 states and 52252 transitions. [2021-12-06 23:26:15,820 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-06 23:26:15,820 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28244 states and 52252 transitions. [2021-12-06 23:26:15,893 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8488 [2021-12-06 23:26:15,893 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:15,893 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:15,894 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:15,894 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:15,894 INFO L791 eck$LassoCheckResult]: Stem: 1325906#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1322105#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1317180#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1317181#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1319963#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1319964#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1331811#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1329177#L3343 assume !(0 == getOrigin_~person#1); 1329178#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1317210#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1317211#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1325126#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1322991#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1322992#L2984 assume 3 == initPersonOnFloor_~floor#1; 1324977#L2985 assume !(0 == initPersonOnFloor_~person#1); 1328120#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1316795#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1322221#L2695 assume !(0 == callOnFloor_~floorID#1); 1322222#L2698 assume !(1 == callOnFloor_~floorID#1); 1321979#L2701 assume !(2 == callOnFloor_~floorID#1); 1321980#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1321217#L2707-2 assume { :end_inline_callOnFloor } true; 1326848#L3047 assume { :end_inline_initPersonOnFloor } true; 1331330#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1331331#L3343-1 assume !(0 == getOrigin_~person#1); 1332310#L3347-1 assume !(1 == getOrigin_~person#1); 1316867#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1316868#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1321875#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1322534#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1328524#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1319452#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1314255#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 1314256#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1322866#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1332571#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1332570#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1332569#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1328306#L2707-5 assume { :end_inline_callOnFloor } true; 1332026#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1315666#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1315667#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1322993#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1322994#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1329096#L1702 assume 0 != timeShift_~tmp~16#1; 1327254#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1327255#L2632 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1316734#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1330782#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 1330783#L1417 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1329338#L680 stopRequestedAtCurrentFloor_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1314834#L1421 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1314835#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 1328989#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1331360#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 1330688#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1330689#L2632-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1315905#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1326956#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 1329293#L1272 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1317321#L680-3 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1316099#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 1316100#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1321956#L1329 assume !(1 == ~currentHeading~0); 1316340#L1339 assume !(0 == ~currentFloorID~0); 1316341#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1317976#L1345-1 assume { :end_inline_continueInDirection } true; 1327232#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1332413#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1332406#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1332407#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1332412#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1332546#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1332547#L1992-2 [2021-12-06 23:26:15,894 INFO L793 eck$LassoCheckResult]: Loop: 1332547#L1992-2 assume !false; 1332544#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1332545#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1332554#L2001-2 assume !false; 1332498#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1332499#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1332547#L1992-2 [2021-12-06 23:26:15,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:15,895 INFO L85 PathProgramCache]: Analyzing trace with hash 886367810, now seen corresponding path program 1 times [2021-12-06 23:26:15,895 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:15,895 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1925626591] [2021-12-06 23:26:15,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:15,895 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:15,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:15,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:15,929 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:15,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1925626591] [2021-12-06 23:26:15,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1925626591] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:15,929 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:15,929 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:26:15,929 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711928695] [2021-12-06 23:26:15,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:15,930 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:15,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:15,930 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 10 times [2021-12-06 23:26:15,930 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:15,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1103016272] [2021-12-06 23:26:15,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:15,930 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:15,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:15,933 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:15,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:15,936 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:15,949 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:15,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:15,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:15,950 INFO L87 Difference]: Start difference. First operand 28244 states and 52252 transitions. cyclomatic complexity: 24142 Second operand has 4 states, 4 states have (on average 18.25) internal successors, (73), 3 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:19,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:19,451 INFO L93 Difference]: Finished difference Result 48978 states and 88859 transitions. [2021-12-06 23:26:19,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:26:19,452 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48978 states and 88859 transitions. [2021-12-06 23:26:19,601 INFO L131 ngComponentsAnalysis]: Automaton has 242 accepting balls. 15024 [2021-12-06 23:26:19,717 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48978 states to 48978 states and 88859 transitions. [2021-12-06 23:26:19,717 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48528 [2021-12-06 23:26:19,745 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48528 [2021-12-06 23:26:19,745 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48978 states and 88859 transitions. [2021-12-06 23:26:19,754 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:19,754 INFO L681 BuchiCegarLoop]: Abstraction has 48978 states and 88859 transitions. [2021-12-06 23:26:19,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48978 states and 88859 transitions. [2021-12-06 23:26:20,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48978 to 28244. [2021-12-06 23:26:20,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28244 states, 28244 states have (on average 1.8055870273332388) internal successors, (50997), 28243 states have internal predecessors, (50997), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:20,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28244 states to 28244 states and 50997 transitions. [2021-12-06 23:26:20,203 INFO L704 BuchiCegarLoop]: Abstraction has 28244 states and 50997 transitions. [2021-12-06 23:26:20,203 INFO L587 BuchiCegarLoop]: Abstraction has 28244 states and 50997 transitions. [2021-12-06 23:26:20,203 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-06 23:26:20,203 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28244 states and 50997 transitions. [2021-12-06 23:26:20,276 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8488 [2021-12-06 23:26:20,276 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:20,276 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:20,277 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:20,277 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:20,277 INFO L791 eck$LassoCheckResult]: Stem: 1403099#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1399314#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1394383#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1394384#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1397132#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1397133#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1409290#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1406484#L3343 assume !(0 == getOrigin_~person#1); 1406485#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1394415#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1394416#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1402317#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1400196#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1400197#L2984 assume 3 == initPersonOnFloor_~floor#1; 1402163#L2985 assume !(0 == initPersonOnFloor_~person#1); 1405357#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1394002#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1399431#L2695 assume !(0 == callOnFloor_~floorID#1); 1399432#L2698 assume !(1 == callOnFloor_~floorID#1); 1399189#L2701 assume !(2 == callOnFloor_~floorID#1); 1399190#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1398410#L2707-2 assume { :end_inline_callOnFloor } true; 1404038#L3047 assume { :end_inline_initPersonOnFloor } true; 1408752#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1408753#L3343-1 assume !(0 == getOrigin_~person#1); 1409840#L3347-1 assume !(1 == getOrigin_~person#1); 1394072#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1394073#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1399080#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1399745#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1405789#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1396631#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1391486#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 1391487#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1400071#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1409939#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1409938#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1409937#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1405565#L2707-5 assume { :end_inline_callOnFloor } true; 1409527#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1392882#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1392883#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1400198#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1400199#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1406395#L1702 assume 0 != timeShift_~tmp~16#1; 1404457#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1404458#L2632 assume !(0 == isFloorCalling_~floorID#1); 1393942#L2636 assume !(1 == isFloorCalling_~floorID#1); 1393943#L2640 assume !(2 == isFloorCalling_~floorID#1); 1405305#L2644 assume !(3 == isFloorCalling_~floorID#1); 1403887#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1403888#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1408152#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 1408153#L1417 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1406654#L680 stopRequestedAtCurrentFloor_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1392062#L1421 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1392063#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 1406289#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1408781#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 1408040#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1408041#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 1407424#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 1407425#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 1408672#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 1393123#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1393124#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1404154#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 1406604#L1272 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1394525#L680-3 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1393314#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 1393315#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1399168#L1329 assume !(1 == ~currentHeading~0); 1393551#L1339 assume !(0 == ~currentFloorID~0); 1393552#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1395176#L1345-1 assume { :end_inline_continueInDirection } true; 1404435#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1409972#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1409965#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1409966#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1409971#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1410093#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1410094#L1992-2 [2021-12-06 23:26:20,277 INFO L793 eck$LassoCheckResult]: Loop: 1410094#L1992-2 assume !false; 1410091#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1410092#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1410105#L2001-2 assume !false; 1410102#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1410103#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1410094#L1992-2 [2021-12-06 23:26:20,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:20,278 INFO L85 PathProgramCache]: Analyzing trace with hash 1301382358, now seen corresponding path program 1 times [2021-12-06 23:26:20,278 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:20,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1721227363] [2021-12-06 23:26:20,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:20,279 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:20,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:20,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:20,321 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:20,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1721227363] [2021-12-06 23:26:20,321 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1721227363] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:20,321 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:20,321 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:20,322 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379448439] [2021-12-06 23:26:20,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:20,322 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:20,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:20,322 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 11 times [2021-12-06 23:26:20,322 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:20,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1293413492] [2021-12-06 23:26:20,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:20,323 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:20,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:20,326 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:20,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:20,329 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:20,343 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:20,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:26:20,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:26:20,344 INFO L87 Difference]: Start difference. First operand 28244 states and 50997 transitions. cyclomatic complexity: 22887 Second operand has 6 states, 6 states have (on average 13.5) internal successors, (81), 5 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:29,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:29,129 INFO L93 Difference]: Finished difference Result 175007 states and 318031 transitions. [2021-12-06 23:26:29,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 23:26:29,129 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 175007 states and 318031 transitions. [2021-12-06 23:26:29,816 INFO L131 ngComponentsAnalysis]: Automaton has 1048 accepting balls. 50706 [2021-12-06 23:26:30,243 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 175007 states to 175007 states and 318031 transitions. [2021-12-06 23:26:30,243 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 173057 [2021-12-06 23:26:30,343 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 173057 [2021-12-06 23:26:30,343 INFO L73 IsDeterministic]: Start isDeterministic. Operand 175007 states and 318031 transitions. [2021-12-06 23:26:30,355 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:30,355 INFO L681 BuchiCegarLoop]: Abstraction has 175007 states and 318031 transitions. [2021-12-06 23:26:30,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175007 states and 318031 transitions. [2021-12-06 23:26:31,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175007 to 55864. [2021-12-06 23:26:31,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55864 states, 55864 states have (on average 1.8062258341686954) internal successors, (100903), 55863 states have internal predecessors, (100903), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:31,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55864 states to 55864 states and 100903 transitions. [2021-12-06 23:26:31,444 INFO L704 BuchiCegarLoop]: Abstraction has 55864 states and 100903 transitions. [2021-12-06 23:26:31,444 INFO L587 BuchiCegarLoop]: Abstraction has 55864 states and 100903 transitions. [2021-12-06 23:26:31,444 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-06 23:26:31,444 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55864 states and 100903 transitions. [2021-12-06 23:26:31,587 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 16820 [2021-12-06 23:26:31,587 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:31,587 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:31,588 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:31,588 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:31,589 INFO L791 eck$LassoCheckResult]: Stem: 1606376#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1602582#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1597660#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1597661#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1600404#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1600405#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1612413#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1609731#L3343 assume !(0 == getOrigin_~person#1); 1609732#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1597690#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1597691#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1605590#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1603462#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1603463#L2984 assume 3 == initPersonOnFloor_~floor#1; 1605436#L2985 assume !(0 == initPersonOnFloor_~person#1); 1608619#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1597280#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1602700#L2695 assume !(0 == callOnFloor_~floorID#1); 1602701#L2698 assume !(1 == callOnFloor_~floorID#1); 1602454#L2701 assume !(2 == callOnFloor_~floorID#1); 1602455#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1601684#L2707-2 assume { :end_inline_callOnFloor } true; 1613103#L3047 assume { :end_inline_initPersonOnFloor } true; 1613102#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1613101#L3343-1 assume !(0 == getOrigin_~person#1); 1613100#L3347-1 assume !(1 == getOrigin_~person#1); 1613099#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1613098#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1613097#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1613096#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1613094#L2957-1 assume !(2 == initPersonOnFloor_~floor#1); 1613095#L2984-1 assume !(3 == initPersonOnFloor_~floor#1); 1612835#L3011-2 assume !(4 == initPersonOnFloor_~floor#1); 1597309#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1600470#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1607889#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1607890#L2701-2 assume !(2 == callOnFloor_~floorID#1); 1608131#L2704-2 assume !(3 == callOnFloor_~floorID#1); 1613064#L2707-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1608817#L2707-5 assume { :end_inline_callOnFloor } true; 1613006#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1596160#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1596161#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1603464#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1603465#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1612800#L1702 assume 0 != timeShift_~tmp~16#1; 1612801#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1613037#L2632 assume !(0 == isFloorCalling_~floorID#1); 1613035#L2636 assume !(1 == isFloorCalling_~floorID#1); 1613033#L2640 assume !(2 == isFloorCalling_~floorID#1); 1613031#L2644 assume !(3 == isFloorCalling_~floorID#1); 1613029#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1613027#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1613025#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 1613022#L1417 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1609898#L680 stopRequestedAtCurrentFloor_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1595338#L1421 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1595339#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 1609536#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1611936#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 1611248#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1611249#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 1610643#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 1610644#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 1611839#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 1596397#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1596398#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1607424#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 1609847#L1272 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1597804#L680-3 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1596590#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 1596591#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1602433#L1329 assume !(1 == ~currentHeading~0); 1596828#L1339 assume !(0 == ~currentFloorID~0); 1596829#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1598450#L1345-1 assume { :end_inline_continueInDirection } true; 1607708#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1615986#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1615973#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1615974#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1615985#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1616161#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1616162#L1992-2 [2021-12-06 23:26:31,589 INFO L793 eck$LassoCheckResult]: Loop: 1616162#L1992-2 assume !false; 1616159#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1616160#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1616165#L2001-2 assume !false; 1616154#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1616155#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1616162#L1992-2 [2021-12-06 23:26:31,589 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:31,589 INFO L85 PathProgramCache]: Analyzing trace with hash -1582324856, now seen corresponding path program 1 times [2021-12-06 23:26:31,589 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:31,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14323937] [2021-12-06 23:26:31,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:31,589 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:31,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:31,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:31,622 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:31,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14323937] [2021-12-06 23:26:31,622 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14323937] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:31,622 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:31,622 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:31,622 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141762218] [2021-12-06 23:26:31,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:31,622 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:31,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:31,623 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 12 times [2021-12-06 23:26:31,623 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:31,623 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [935506908] [2021-12-06 23:26:31,623 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:31,623 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:31,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:31,626 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:31,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:31,629 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:31,642 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:31,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:31,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:31,643 INFO L87 Difference]: Start difference. First operand 55864 states and 100903 transitions. cyclomatic complexity: 45307 Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:32,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:32,421 INFO L93 Difference]: Finished difference Result 108068 states and 195293 transitions. [2021-12-06 23:26:32,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:32,421 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 108068 states and 195293 transitions. [2021-12-06 23:26:32,896 INFO L131 ngComponentsAnalysis]: Automaton has 380 accepting balls. 45156 [2021-12-06 23:26:33,171 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 108068 states to 108068 states and 195293 transitions. [2021-12-06 23:26:33,172 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 107618 [2021-12-06 23:26:33,230 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 107618 [2021-12-06 23:26:33,230 INFO L73 IsDeterministic]: Start isDeterministic. Operand 108068 states and 195293 transitions. [2021-12-06 23:26:33,231 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:33,231 INFO L681 BuchiCegarLoop]: Abstraction has 108068 states and 195293 transitions. [2021-12-06 23:26:33,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108068 states and 195293 transitions. [2021-12-06 23:26:33,925 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108068 to 55860. [2021-12-06 23:26:33,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55860 states, 55860 states have (on average 1.805889724310777) internal successors, (100877), 55859 states have internal predecessors, (100877), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:34,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55860 states to 55860 states and 100877 transitions. [2021-12-06 23:26:34,085 INFO L704 BuchiCegarLoop]: Abstraction has 55860 states and 100877 transitions. [2021-12-06 23:26:34,085 INFO L587 BuchiCegarLoop]: Abstraction has 55860 states and 100877 transitions. [2021-12-06 23:26:34,085 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-06 23:26:34,086 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55860 states and 100877 transitions. [2021-12-06 23:26:34,228 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 16820 [2021-12-06 23:26:34,229 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:34,229 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:34,229 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:34,230 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:34,230 INFO L791 eck$LassoCheckResult]: Stem: 1770228#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1766489#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1761591#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1761592#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1764342#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1764343#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1776080#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1773488#L3343 assume !(0 == getOrigin_~person#1); 1773489#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1761621#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1761622#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1769463#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1767379#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1767380#L2984 assume 3 == initPersonOnFloor_~floor#1; 1769314#L2985 assume !(0 == initPersonOnFloor_~person#1); 1772411#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1761219#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1766603#L2695 assume !(0 == callOnFloor_~floorID#1); 1766604#L2698 assume !(1 == callOnFloor_~floorID#1); 1766366#L2701 assume !(2 == callOnFloor_~floorID#1); 1766367#L2704 assume !(3 == callOnFloor_~floorID#1); 1765607#L2707 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1765608#L2707-2 assume { :end_inline_callOnFloor } true; 1776560#L3047 assume { :end_inline_initPersonOnFloor } true; 1776561#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1776518#L3343-1 assume !(0 == getOrigin_~person#1); 1776519#L3347-1 assume !(1 == getOrigin_~person#1); 1761287#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1761288#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1766913#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1766914#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1772813#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1772814#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1758702#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 1758703#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1764407#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1764408#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1771710#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1771711#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1771921#L2707-5 assume { :end_inline_callOnFloor } true; 1776635#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1776620#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1776618#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1776616#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1776614#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1776612#L1702 assume 0 != timeShift_~tmp~16#1; 1776610#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1776607#L2632 assume !(0 == isFloorCalling_~floorID#1); 1776605#L2636 assume !(1 == isFloorCalling_~floorID#1); 1776603#L2640 assume !(2 == isFloorCalling_~floorID#1); 1776601#L2644 assume !(3 == isFloorCalling_~floorID#1); 1776599#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1776597#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1776595#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 1776592#L1417 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1773660#L680 stopRequestedAtCurrentFloor_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1759281#L1421 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1759282#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 1777418#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1777417#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 1777416#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1777415#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 1777414#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 1777413#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 1777408#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 1777406#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1777405#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1776962#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 1776821#L1272 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1776813#L680-3 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1776808#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 1776801#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1776794#L1329 assume !(1 == ~currentHeading~0); 1776787#L1339 assume !(0 == ~currentFloorID~0); 1776780#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1776776#L1345-1 assume { :end_inline_continueInDirection } true; 1776732#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1776641#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1776633#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1776634#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1776640#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1776766#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1776767#L1992-2 [2021-12-06 23:26:34,230 INFO L793 eck$LassoCheckResult]: Loop: 1776767#L1992-2 assume !false; 1776764#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1776765#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1776775#L2001-2 assume !false; 1776773#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1776774#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1776767#L1992-2 [2021-12-06 23:26:34,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:34,230 INFO L85 PathProgramCache]: Analyzing trace with hash 674574038, now seen corresponding path program 1 times [2021-12-06 23:26:34,230 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:34,230 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [303697573] [2021-12-06 23:26:34,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:34,231 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:34,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:34,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:34,262 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:34,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [303697573] [2021-12-06 23:26:34,262 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [303697573] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:34,263 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:34,263 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:34,263 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1965316554] [2021-12-06 23:26:34,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:34,263 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:34,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:34,264 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 13 times [2021-12-06 23:26:34,264 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:34,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1936302656] [2021-12-06 23:26:34,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:34,264 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:34,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:34,267 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:34,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:34,271 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:34,284 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:34,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:34,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:34,285 INFO L87 Difference]: Start difference. First operand 55860 states and 100877 transitions. cyclomatic complexity: 45285 Second operand has 5 states, 5 states have (on average 16.4) internal successors, (82), 5 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:35,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:35,661 INFO L93 Difference]: Finished difference Result 148825 states and 268921 transitions. [2021-12-06 23:26:35,661 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 23:26:35,662 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 148825 states and 268921 transitions. [2021-12-06 23:26:36,245 INFO L131 ngComponentsAnalysis]: Automaton has 536 accepting balls. 60650 [2021-12-06 23:26:36,610 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 148825 states to 148825 states and 268921 transitions. [2021-12-06 23:26:36,610 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 148150 [2021-12-06 23:26:36,786 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 148150 [2021-12-06 23:26:36,786 INFO L73 IsDeterministic]: Start isDeterministic. Operand 148825 states and 268921 transitions. [2021-12-06 23:26:36,838 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:36,838 INFO L681 BuchiCegarLoop]: Abstraction has 148825 states and 268921 transitions. [2021-12-06 23:26:36,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148825 states and 268921 transitions. [2021-12-06 23:26:37,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148825 to 55877. [2021-12-06 23:26:37,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55877 states, 55877 states have (on average 1.805483472627378) internal successors, (100885), 55876 states have internal predecessors, (100885), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:37,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55877 states to 55877 states and 100885 transitions. [2021-12-06 23:26:37,845 INFO L704 BuchiCegarLoop]: Abstraction has 55877 states and 100885 transitions. [2021-12-06 23:26:37,845 INFO L587 BuchiCegarLoop]: Abstraction has 55877 states and 100885 transitions. [2021-12-06 23:26:37,845 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-12-06 23:26:37,845 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55877 states and 100885 transitions. [2021-12-06 23:26:37,988 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 16820 [2021-12-06 23:26:37,988 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:37,988 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:37,989 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:37,990 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:37,990 INFO L791 eck$LassoCheckResult]: Stem: 1974744#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 1971109#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1966288#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1966289#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1968994#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 1968995#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1980039#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1977788#L3343 assume !(0 == getOrigin_~person#1); 1977789#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1966320#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1966321#L2903 assume !(0 == initPersonOnFloor_~floor#1); 1973998#L2930 assume !(1 == initPersonOnFloor_~floor#1); 1971968#L2957 assume !(2 == initPersonOnFloor_~floor#1); 1971969#L2984 assume 3 == initPersonOnFloor_~floor#1; 1973857#L2985 assume !(0 == initPersonOnFloor_~person#1); 1976810#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1965917#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1971222#L2695 assume !(0 == callOnFloor_~floorID#1); 1971223#L2698 assume !(1 == callOnFloor_~floorID#1); 1970985#L2701 assume !(2 == callOnFloor_~floorID#1); 1970986#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1975617#L2707-2 assume { :end_inline_callOnFloor } true; 1975618#L3047 assume { :end_inline_initPersonOnFloor } true; 1979661#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 1979662#L3343-1 assume !(0 == getOrigin_~person#1); 1980374#L3347-1 assume !(1 == getOrigin_~person#1); 1965984#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 1965985#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1970884#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 1971522#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 1977178#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 1968494#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 1963406#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 1963407#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1969058#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1969059#L2695-2 assume !(0 == callOnFloor_~floorID#1); 1976151#L2698-2 assume !(1 == callOnFloor_~floorID#1); 1976152#L2701-2 assume !(2 == callOnFloor_~floorID#1); 1976357#L2704-2 assume !(3 == callOnFloor_~floorID#1); 1976983#L2707-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1977553#L2707-5 assume { :end_inline_callOnFloor } true; 1980460#L3047-1 assume { :end_inline_initPersonOnFloor } true; 1980445#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1980443#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 1980441#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1980439#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1980437#L1702 assume 0 != timeShift_~tmp~16#1; 1980435#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1980432#L2632 assume !(0 == isFloorCalling_~floorID#1); 1980430#L2636 assume !(1 == isFloorCalling_~floorID#1); 1980428#L2640 assume !(2 == isFloorCalling_~floorID#1); 1980426#L2644 assume !(3 == isFloorCalling_~floorID#1); 1980424#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1980422#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1980420#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 1980417#L1417 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1977941#L680 stopRequestedAtCurrentFloor_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1963983#L1421 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1963984#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 1981270#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1981267#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 1981258#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 1981251#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 1981250#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 1981249#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 1981248#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 1981234#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 1981227#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1980796#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 1980657#L1272 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1980651#L680-3 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1980646#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 1980639#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1980633#L1329 assume !(1 == ~currentHeading~0); 1980626#L1339 assume !(0 == ~currentFloorID~0); 1980621#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1980615#L1345-1 assume { :end_inline_continueInDirection } true; 1980559#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1980466#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 1980458#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 1980459#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1980465#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 1980605#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1980606#L1992-2 [2021-12-06 23:26:37,990 INFO L793 eck$LassoCheckResult]: Loop: 1980606#L1992-2 assume !false; 1980603#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1980604#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1980537#L2001-2 assume !false; 1980534#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1980535#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1980606#L1992-2 [2021-12-06 23:26:37,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:37,991 INFO L85 PathProgramCache]: Analyzing trace with hash -332309807, now seen corresponding path program 1 times [2021-12-06 23:26:37,991 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:37,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [467159459] [2021-12-06 23:26:37,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:37,991 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:38,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:38,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:38,029 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:38,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [467159459] [2021-12-06 23:26:38,029 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [467159459] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:38,029 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:38,030 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:38,030 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [284431832] [2021-12-06 23:26:38,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:38,030 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:38,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:38,030 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 14 times [2021-12-06 23:26:38,030 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:38,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1856323559] [2021-12-06 23:26:38,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:38,031 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:38,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:38,034 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:38,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:38,037 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:38,047 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:38,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:38,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:38,048 INFO L87 Difference]: Start difference. First operand 55877 states and 100885 transitions. cyclomatic complexity: 45276 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:38,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:38,726 INFO L93 Difference]: Finished difference Result 66617 states and 120386 transitions. [2021-12-06 23:26:38,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:26:38,727 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66617 states and 120386 transitions. [2021-12-06 23:26:38,947 INFO L131 ngComponentsAnalysis]: Automaton has 224 accepting balls. 29506 [2021-12-06 23:26:39,114 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66617 states to 66617 states and 120386 transitions. [2021-12-06 23:26:39,115 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66392 [2021-12-06 23:26:39,154 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66392 [2021-12-06 23:26:39,154 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66617 states and 120386 transitions. [2021-12-06 23:26:39,155 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:39,155 INFO L681 BuchiCegarLoop]: Abstraction has 66617 states and 120386 transitions. [2021-12-06 23:26:39,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66617 states and 120386 transitions. [2021-12-06 23:26:39,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66617 to 40841. [2021-12-06 23:26:39,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40841 states, 40841 states have (on average 1.8061751671114812) internal successors, (73766), 40840 states have internal predecessors, (73766), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:39,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40841 states to 40841 states and 73766 transitions. [2021-12-06 23:26:39,771 INFO L704 BuchiCegarLoop]: Abstraction has 40841 states and 73766 transitions. [2021-12-06 23:26:39,771 INFO L587 BuchiCegarLoop]: Abstraction has 40841 states and 73766 transitions. [2021-12-06 23:26:39,771 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-12-06 23:26:39,771 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 40841 states and 73766 transitions. [2021-12-06 23:26:39,872 INFO L131 ngComponentsAnalysis]: Automaton has 156 accepting balls. 15494 [2021-12-06 23:26:39,872 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:39,872 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:39,873 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:39,873 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:39,873 INFO L791 eck$LassoCheckResult]: Stem: 2097275#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 2093592#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2088767#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2088768#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 2091467#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 2091468#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2102988#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2100466#L3343 assume !(0 == getOrigin_~person#1); 2100467#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2088797#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2088798#L2903 assume !(0 == initPersonOnFloor_~floor#1); 2096525#L2930 assume !(1 == initPersonOnFloor_~floor#1); 2094449#L2957 assume !(2 == initPersonOnFloor_~floor#1); 2094450#L2984 assume 3 == initPersonOnFloor_~floor#1; 2096378#L2985 assume !(0 == initPersonOnFloor_~person#1); 2099430#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2088396#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2093706#L2695 assume !(0 == callOnFloor_~floorID#1); 2093707#L2698 assume !(1 == callOnFloor_~floorID#1); 2093470#L2701 assume !(2 == callOnFloor_~floorID#1); 2093471#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2098183#L2707-2 assume { :end_inline_callOnFloor } true; 2098184#L3047 assume { :end_inline_initPersonOnFloor } true; 2102523#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2102524#L3343-1 assume !(0 == getOrigin_~person#1); 2103404#L3347-1 assume !(1 == getOrigin_~person#1); 2088463#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2088464#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2093366#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 2094005#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 2099818#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 2090973#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 2085908#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 2085909#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2091533#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2091534#L2695-2 assume !(0 == callOnFloor_~floorID#1); 2098731#L2698-2 assume !(1 == callOnFloor_~floorID#1); 2098732#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2098948#L2707-5 assume { :end_inline_callOnFloor } true; 2103173#L3047-1 assume { :end_inline_initPersonOnFloor } true; 2087296#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 2087297#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 2094451#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2094452#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 2100381#L1702 assume 0 != timeShift_~tmp~16#1; 2098568#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2098569#L2632 assume !(0 == isFloorCalling_~floorID#1); 2088335#L2636 assume !(1 == isFloorCalling_~floorID#1); 2088336#L2640 assume !(2 == isFloorCalling_~floorID#1); 2099378#L2644 assume !(3 == isFloorCalling_~floorID#1); 2098030#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2098031#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2102019#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 2102020#L1417 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 2102931#L1391-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2103440#L680-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 2097565#L697-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 2086118#L718-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 2093170#L1402-1 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2093171#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 2100286#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2102550#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 2101921#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2101922#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 2101334#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 2101335#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 2102452#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 2087526#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2087527#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2098285#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 2100590#L1272 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2088904#L680-3 stopRequestedInDirection_#t~ret51#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 2087719#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 2087720#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 2093450#L1329 assume !(1 == ~currentHeading~0); 2087953#L1339 assume !(0 == ~currentFloorID~0); 2087954#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2089542#L1345-1 assume { :end_inline_continueInDirection } true; 2098548#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2103491#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 2103484#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 2103485#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2103490#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 2103638#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2103639#L1992-2 [2021-12-06 23:26:39,873 INFO L793 eck$LassoCheckResult]: Loop: 2103639#L1992-2 assume !false; 2103636#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2103637#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2103642#L2001-2 assume !false; 2103631#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2103632#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2103639#L1992-2 [2021-12-06 23:26:39,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:39,873 INFO L85 PathProgramCache]: Analyzing trace with hash -1723566872, now seen corresponding path program 1 times [2021-12-06 23:26:39,874 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:39,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [737355200] [2021-12-06 23:26:39,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:39,874 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:39,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:39,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:39,914 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:39,914 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [737355200] [2021-12-06 23:26:39,914 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [737355200] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:39,915 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:39,915 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:39,915 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [529053149] [2021-12-06 23:26:39,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:39,915 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:39,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:39,916 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 15 times [2021-12-06 23:26:39,916 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:39,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [931520902] [2021-12-06 23:26:39,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:39,916 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:39,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:39,919 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:39,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:39,922 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:39,936 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:39,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:26:39,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:26:39,937 INFO L87 Difference]: Start difference. First operand 40841 states and 73766 transitions. cyclomatic complexity: 33093 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 5 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:45,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:45,054 INFO L93 Difference]: Finished difference Result 106060 states and 192641 transitions. [2021-12-06 23:26:45,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:26:45,055 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 106060 states and 192641 transitions. [2021-12-06 23:26:45,522 INFO L131 ngComponentsAnalysis]: Automaton has 603 accepting balls. 42968 [2021-12-06 23:26:45,792 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 106060 states to 106060 states and 192641 transitions. [2021-12-06 23:26:45,792 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 105610 [2021-12-06 23:26:45,853 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 105610 [2021-12-06 23:26:45,853 INFO L73 IsDeterministic]: Start isDeterministic. Operand 106060 states and 192641 transitions. [2021-12-06 23:26:45,854 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:45,854 INFO L681 BuchiCegarLoop]: Abstraction has 106060 states and 192641 transitions. [2021-12-06 23:26:45,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106060 states and 192641 transitions. [2021-12-06 23:26:46,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106060 to 40809. [2021-12-06 23:26:46,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40809 states, 40809 states have (on average 1.8060231811610183) internal successors, (73702), 40808 states have internal predecessors, (73702), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:46,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40809 states to 40809 states and 73702 transitions. [2021-12-06 23:26:46,501 INFO L704 BuchiCegarLoop]: Abstraction has 40809 states and 73702 transitions. [2021-12-06 23:26:46,501 INFO L587 BuchiCegarLoop]: Abstraction has 40809 states and 73702 transitions. [2021-12-06 23:26:46,501 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-12-06 23:26:46,501 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 40809 states and 73702 transitions. [2021-12-06 23:26:46,603 INFO L131 ngComponentsAnalysis]: Automaton has 156 accepting balls. 15486 [2021-12-06 23:26:46,603 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:46,603 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:46,604 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:46,604 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:46,604 INFO L791 eck$LassoCheckResult]: Stem: 2244456#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 2240625#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2235709#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2235710#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 2238452#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 2238453#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2250875#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2247941#L3343 assume !(0 == getOrigin_~person#1); 2247942#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2235739#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2235740#L2903 assume !(0 == initPersonOnFloor_~floor#1); 2243659#L2930 assume !(1 == initPersonOnFloor_~floor#1); 2241499#L2957 assume !(2 == initPersonOnFloor_~floor#1); 2241500#L2984 assume 3 == initPersonOnFloor_~floor#1; 2243506#L2985 assume !(0 == initPersonOnFloor_~person#1); 2246770#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2235331#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2240742#L2695 assume !(0 == callOnFloor_~floorID#1); 2240743#L2698 assume !(1 == callOnFloor_~floorID#1); 2240499#L2701 assume !(2 == callOnFloor_~floorID#1); 2240500#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2245416#L2707-2 assume { :end_inline_callOnFloor } true; 2245417#L3047 assume { :end_inline_initPersonOnFloor } true; 2250314#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2250315#L3343-1 assume !(0 == getOrigin_~person#1); 2251512#L3347-1 assume !(1 == getOrigin_~person#1); 2235398#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2235399#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2240389#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 2241050#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 2247216#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 2237947#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 2232840#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 2232841#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2238516#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2238517#L2695-2 assume !(0 == callOnFloor_~floorID#1); 2246012#L2698-2 assume !(1 == callOnFloor_~floorID#1); 2246013#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2246254#L2707-5 assume { :end_inline_callOnFloor } true; 2251145#L3047-1 assume { :end_inline_initPersonOnFloor } true; 2234228#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 2234229#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 2241501#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2241502#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 2247844#L1702 assume 0 != timeShift_~tmp~16#1; 2245844#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2245845#L2632 assume !(0 == isFloorCalling_~floorID#1); 2235271#L2636 assume !(1 == isFloorCalling_~floorID#1); 2235272#L2640 assume !(2 == isFloorCalling_~floorID#1); 2246708#L2644 assume !(3 == isFloorCalling_~floorID#1); 2245264#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2245265#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2249698#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 2249699#L1417 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 2250802#L1391-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2251573#L680-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 2244769#L697-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 2233049#L718-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 2240199#L1402-1 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2240200#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 2247736#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2250346#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 2249580#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2249581#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 2248900#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 2248901#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 2250226#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 2234462#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2234463#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2245533#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 2248065#L1272 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 2248802#L1294 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 2234552#L1315 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 2234553#L1238 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2248275#L884-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 2236446#L1053-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 2232857#L1206-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 2233787#L1256 stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 2234654#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 2234655#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 2240477#L1329 assume !(1 == ~currentHeading~0); 2234889#L1339 assume !(0 == ~currentFloorID~0); 2234890#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2236492#L1345-1 assume { :end_inline_continueInDirection } true; 2238665#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2238666#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 2236104#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 2236105#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2245067#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 2246869#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2242661#L1992-2 [2021-12-06 23:26:46,604 INFO L793 eck$LassoCheckResult]: Loop: 2242661#L1992-2 assume !false; 2238340#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2238341#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2237878#L2001-2 assume !false; 2237879#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2242660#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2242661#L1992-2 [2021-12-06 23:26:46,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:46,605 INFO L85 PathProgramCache]: Analyzing trace with hash -1473510570, now seen corresponding path program 1 times [2021-12-06 23:26:46,605 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:46,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2057110322] [2021-12-06 23:26:46,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:46,605 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:46,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:46,634 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:46,634 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:46,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2057110322] [2021-12-06 23:26:46,635 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2057110322] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:46,635 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:46,635 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:46,635 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784989875] [2021-12-06 23:26:46,635 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:46,635 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:46,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:46,635 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 16 times [2021-12-06 23:26:46,636 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:46,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825907248] [2021-12-06 23:26:46,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:46,636 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:46,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:46,638 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:46,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:46,641 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:46,653 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:46,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:46,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:46,654 INFO L87 Difference]: Start difference. First operand 40809 states and 73702 transitions. cyclomatic complexity: 33061 Second operand has 3 states, 3 states have (on average 30.0) internal successors, (90), 2 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:47,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:47,438 INFO L93 Difference]: Finished difference Result 62868 states and 113231 transitions. [2021-12-06 23:26:47,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:47,439 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62868 states and 113231 transitions. [2021-12-06 23:26:47,673 INFO L131 ngComponentsAnalysis]: Automaton has 228 accepting balls. 23968 [2021-12-06 23:26:47,841 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62868 states to 62868 states and 113231 transitions. [2021-12-06 23:26:47,842 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62571 [2021-12-06 23:26:47,881 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62571 [2021-12-06 23:26:47,882 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62868 states and 113231 transitions. [2021-12-06 23:26:47,882 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:47,882 INFO L681 BuchiCegarLoop]: Abstraction has 62868 states and 113231 transitions. [2021-12-06 23:26:47,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62868 states and 113231 transitions. [2021-12-06 23:26:48,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62868 to 62865. [2021-12-06 23:26:48,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62865 states, 62865 states have (on average 1.8011294042790105) internal successors, (113228), 62864 states have internal predecessors, (113228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:48,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62865 states to 62865 states and 113228 transitions. [2021-12-06 23:26:48,741 INFO L704 BuchiCegarLoop]: Abstraction has 62865 states and 113228 transitions. [2021-12-06 23:26:48,741 INFO L587 BuchiCegarLoop]: Abstraction has 62865 states and 113228 transitions. [2021-12-06 23:26:48,741 INFO L425 BuchiCegarLoop]: ======== Iteration 20============ [2021-12-06 23:26:48,741 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62865 states and 113228 transitions. [2021-12-06 23:26:48,867 INFO L131 ngComponentsAnalysis]: Automaton has 228 accepting balls. 23968 [2021-12-06 23:26:48,867 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:48,867 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:48,868 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:48,868 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:48,868 INFO L791 eck$LassoCheckResult]: Stem: 2347797#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 2344166#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2339381#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2339382#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 2342070#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 2342071#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2353203#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2350887#L3343 assume !(0 == getOrigin_~person#1); 2350888#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2339411#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2339412#L2903 assume !(0 == initPersonOnFloor_~floor#1); 2347054#L2930 assume !(1 == initPersonOnFloor_~floor#1); 2345031#L2957 assume !(2 == initPersonOnFloor_~floor#1); 2345032#L2984 assume 3 == initPersonOnFloor_~floor#1; 2346914#L2985 assume !(0 == initPersonOnFloor_~person#1); 2349879#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2339005#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2344281#L2695 assume !(0 == callOnFloor_~floorID#1); 2344282#L2698 assume !(1 == callOnFloor_~floorID#1); 2344043#L2701 assume !(2 == callOnFloor_~floorID#1); 2344044#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2348686#L2707-2 assume { :end_inline_callOnFloor } true; 2348687#L3047 assume { :end_inline_initPersonOnFloor } true; 2352826#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2352827#L3343-1 assume !(0 == getOrigin_~person#1); 2353546#L3347-1 assume !(1 == getOrigin_~person#1); 2339072#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2339073#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2343937#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 2344584#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 2350268#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 2341582#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 2336523#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 2336524#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2342134#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2342135#L2695-2 assume !(0 == callOnFloor_~floorID#1); 2349219#L2698-2 assume !(1 == callOnFloor_~floorID#1); 2349220#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2349426#L2707-5 assume { :end_inline_callOnFloor } true; 2353351#L3047-1 assume { :end_inline_initPersonOnFloor } true; 2337904#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 2337905#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 2345033#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2345034#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 2350808#L1702 assume 0 != timeShift_~tmp~16#1; 2349062#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2349063#L2632 assume !(0 == isFloorCalling_~floorID#1); 2338944#L2636 assume !(1 == isFloorCalling_~floorID#1); 2338945#L2640 assume !(2 == isFloorCalling_~floorID#1); 2349821#L2644 assume !(3 == isFloorCalling_~floorID#1); 2348538#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2348539#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2352354#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 2352355#L1417 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 2353164#L1391-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2353584#L680-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 2348091#L697-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 2336732#L718-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 2343753#L1402-1 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2343754#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 2350713#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2352847#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 2352270#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2352271#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 2351723#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 2351724#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 2352765#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 2338136#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2338137#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2348787#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 2350999#L1272 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 2351629#L1294 assume !(0 != ~floorButtons_0~0); 2349556#L1298 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 2338227#L1315 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 2338228#L1238 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2351174#L884-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 2340105#L1053-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 2336540#L1206-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 2337463#L1256 stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 2338328#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 2338329#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 2344023#L1329 assume !(1 == ~currentHeading~0); 2338562#L1339 assume !(0 == ~currentFloorID~0); 2338563#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2340151#L1345-1 assume { :end_inline_continueInDirection } true; 2349040#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2353627#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 2353620#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 2353621#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2353626#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 2353767#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2353768#L1992-2 [2021-12-06 23:26:48,868 INFO L793 eck$LassoCheckResult]: Loop: 2353768#L1992-2 assume !false; 2353765#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2353766#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2353776#L2001-2 assume !false; 2353773#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2353774#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2353768#L1992-2 [2021-12-06 23:26:48,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:48,868 INFO L85 PathProgramCache]: Analyzing trace with hash -1173465741, now seen corresponding path program 1 times [2021-12-06 23:26:48,869 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:48,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768122522] [2021-12-06 23:26:48,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:48,869 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:48,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:48,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:48,898 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:48,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768122522] [2021-12-06 23:26:48,898 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [768122522] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:48,898 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:48,898 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:48,898 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054381008] [2021-12-06 23:26:48,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:48,899 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:48,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:48,899 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 17 times [2021-12-06 23:26:48,899 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:48,899 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [310220521] [2021-12-06 23:26:48,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:48,899 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:48,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:48,902 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:48,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:48,904 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:48,915 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:48,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:48,916 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:48,916 INFO L87 Difference]: Start difference. First operand 62865 states and 113228 transitions. cyclomatic complexity: 50607 Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 2 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:49,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:49,735 INFO L93 Difference]: Finished difference Result 106814 states and 192032 transitions. [2021-12-06 23:26:49,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:49,736 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 106814 states and 192032 transitions. [2021-12-06 23:26:50,259 INFO L131 ngComponentsAnalysis]: Automaton has 372 accepting balls. 40901 [2021-12-06 23:26:50,528 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 106814 states to 106814 states and 192032 transitions. [2021-12-06 23:26:50,528 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 106379 [2021-12-06 23:26:50,586 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 106379 [2021-12-06 23:26:50,586 INFO L73 IsDeterministic]: Start isDeterministic. Operand 106814 states and 192032 transitions. [2021-12-06 23:26:50,587 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:50,587 INFO L681 BuchiCegarLoop]: Abstraction has 106814 states and 192032 transitions. [2021-12-06 23:26:50,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106814 states and 192032 transitions. [2021-12-06 23:26:51,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106814 to 106808. [2021-12-06 23:26:51,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106808 states, 106808 states have (on average 1.7978615834019924) internal successors, (192026), 106807 states have internal predecessors, (192026), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:51,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106808 states to 106808 states and 192026 transitions. [2021-12-06 23:26:51,932 INFO L704 BuchiCegarLoop]: Abstraction has 106808 states and 192026 transitions. [2021-12-06 23:26:51,932 INFO L587 BuchiCegarLoop]: Abstraction has 106808 states and 192026 transitions. [2021-12-06 23:26:51,932 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-12-06 23:26:51,932 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106808 states and 192026 transitions. [2021-12-06 23:26:52,298 INFO L131 ngComponentsAnalysis]: Automaton has 372 accepting balls. 40901 [2021-12-06 23:26:52,298 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:52,298 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:52,299 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:52,299 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:52,299 INFO L791 eck$LassoCheckResult]: Stem: 2517478#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 2513845#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2509055#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2509056#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 2511737#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 2511738#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2522910#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2520592#L3343 assume !(0 == getOrigin_~person#1); 2520593#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2509084#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2509085#L2903 assume !(0 == initPersonOnFloor_~floor#1); 2516735#L2930 assume !(1 == initPersonOnFloor_~floor#1); 2514693#L2957 assume !(2 == initPersonOnFloor_~floor#1); 2514694#L2984 assume 3 == initPersonOnFloor_~floor#1; 2516593#L2985 assume !(0 == initPersonOnFloor_~person#1); 2519581#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2508683#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2513960#L2695 assume !(0 == callOnFloor_~floorID#1); 2513961#L2698 assume !(1 == callOnFloor_~floorID#1); 2513720#L2701 assume !(2 == callOnFloor_~floorID#1); 2513721#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2518367#L2707-2 assume { :end_inline_callOnFloor } true; 2518368#L3047 assume { :end_inline_initPersonOnFloor } true; 2522516#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2522517#L3343-1 assume !(0 == getOrigin_~person#1); 2523263#L3347-1 assume !(1 == getOrigin_~person#1); 2508750#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2508751#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2513616#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 2514251#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 2519967#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 2511242#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 2506208#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 2506209#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2511802#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2511803#L2695-2 assume !(0 == callOnFloor_~floorID#1); 2518903#L2698-2 assume !(1 == callOnFloor_~floorID#1); 2518904#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2519124#L2707-5 assume { :end_inline_callOnFloor } true; 2523066#L3047-1 assume { :end_inline_initPersonOnFloor } true; 2507585#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 2507586#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 2514695#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2514696#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 2520509#L1702 assume 0 != timeShift_~tmp~16#1; 2518751#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2518752#L2632 assume !(0 == isFloorCalling_~floorID#1); 2508623#L2636 assume !(1 == isFloorCalling_~floorID#1); 2508624#L2640 assume !(2 == isFloorCalling_~floorID#1); 2519529#L2644 assume !(3 == isFloorCalling_~floorID#1); 2518223#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2518224#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2522041#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 2522042#L1417 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 2522865#L1391-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2523295#L680-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 2517770#L697-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 2506417#L718-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 2513426#L1402-1 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2513427#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 2520409#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2522539#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 2521957#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2521958#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 2521415#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 2521416#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 2522448#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 2507814#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2507815#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2518466#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 2520711#L1272 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 2521328#L1294 assume !(0 != ~floorButtons_0~0); 2519263#L1298 assume !(0 != ~floorButtons_1~0); 2519264#L1302 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 2507904#L1315 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 2507905#L1238 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2520886#L884-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 2509775#L1053-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 2506225#L1206-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 2507146#L1256 stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 2508005#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 2508006#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 2513700#L1329 assume !(1 == ~currentHeading~0); 2508239#L1339 assume !(0 == ~currentFloorID~0); 2508240#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2509821#L1345-1 assume { :end_inline_continueInDirection } true; 2518732#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2523348#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 2523341#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 2523342#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2523347#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 2523475#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2523476#L1992-2 [2021-12-06 23:26:52,300 INFO L793 eck$LassoCheckResult]: Loop: 2523476#L1992-2 assume !false; 2523473#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2523474#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2523499#L2001-2 assume !false; 2523496#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2523489#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2523476#L1992-2 [2021-12-06 23:26:52,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:52,300 INFO L85 PathProgramCache]: Analyzing trace with hash -389402693, now seen corresponding path program 1 times [2021-12-06 23:26:52,300 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:52,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [535414769] [2021-12-06 23:26:52,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:52,300 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:52,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:52,332 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:52,332 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:52,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [535414769] [2021-12-06 23:26:52,332 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [535414769] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:52,332 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:52,332 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:52,333 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822808239] [2021-12-06 23:26:52,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:52,333 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:52,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:52,333 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 18 times [2021-12-06 23:26:52,333 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:52,333 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [398456747] [2021-12-06 23:26:52,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:52,333 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:52,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:52,336 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:52,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:52,339 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:52,349 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:52,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:52,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:52,350 INFO L87 Difference]: Start difference. First operand 106808 states and 192026 transitions. cyclomatic complexity: 85614 Second operand has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 2 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:53,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:53,540 INFO L93 Difference]: Finished difference Result 194309 states and 348717 transitions. [2021-12-06 23:26:53,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:53,541 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 194309 states and 348717 transitions. [2021-12-06 23:26:54,327 INFO L131 ngComponentsAnalysis]: Automaton has 660 accepting balls. 74665 [2021-12-06 23:26:54,933 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 194309 states to 194288 states and 348682 transitions. [2021-12-06 23:26:54,934 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 193589 [2021-12-06 23:26:55,028 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 193589 [2021-12-06 23:26:55,028 INFO L73 IsDeterministic]: Start isDeterministic. Operand 194288 states and 348682 transitions. [2021-12-06 23:26:55,028 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:26:55,029 INFO L681 BuchiCegarLoop]: Abstraction has 194288 states and 348682 transitions. [2021-12-06 23:26:55,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194288 states and 348682 transitions. [2021-12-06 23:26:56,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194288 to 194276. [2021-12-06 23:26:56,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 194276 states, 194276 states have (on average 1.7947147357367867) internal successors, (348670), 194275 states have internal predecessors, (348670), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:57,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194276 states to 194276 states and 348670 transitions. [2021-12-06 23:26:57,138 INFO L704 BuchiCegarLoop]: Abstraction has 194276 states and 348670 transitions. [2021-12-06 23:26:57,138 INFO L587 BuchiCegarLoop]: Abstraction has 194276 states and 348670 transitions. [2021-12-06 23:26:57,138 INFO L425 BuchiCegarLoop]: ======== Iteration 22============ [2021-12-06 23:26:57,138 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 194276 states and 348670 transitions. [2021-12-06 23:26:57,724 INFO L131 ngComponentsAnalysis]: Automaton has 660 accepting balls. 74665 [2021-12-06 23:26:57,724 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:26:57,724 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:26:57,725 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:57,725 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:26:57,725 INFO L791 eck$LassoCheckResult]: Stem: 2818671#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 2815000#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2810183#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2810184#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 2812875#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 2812876#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2824225#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2821804#L3343 assume !(0 == getOrigin_~person#1); 2821805#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2810215#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2810216#L2903 assume !(0 == initPersonOnFloor_~floor#1); 2817914#L2930 assume !(1 == initPersonOnFloor_~floor#1); 2815869#L2957 assume !(2 == initPersonOnFloor_~floor#1); 2815870#L2984 assume 3 == initPersonOnFloor_~floor#1; 2817773#L2985 assume !(0 == initPersonOnFloor_~person#1); 2820790#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2809811#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2815124#L2695 assume !(0 == callOnFloor_~floorID#1); 2815125#L2698 assume !(1 == callOnFloor_~floorID#1); 2814876#L2701 assume !(2 == callOnFloor_~floorID#1); 2814877#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2819568#L2707-2 assume { :end_inline_callOnFloor } true; 2819569#L3047 assume { :end_inline_initPersonOnFloor } true; 2823816#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 2823817#L3343-1 assume !(0 == getOrigin_~person#1); 2824612#L3347-1 assume !(1 == getOrigin_~person#1); 2809879#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 2809880#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2814772#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 2815421#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 2821175#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 2812376#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 2807334#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 2807335#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2812942#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2812943#L2695-2 assume !(0 == callOnFloor_~floorID#1); 2820107#L2698-2 assume !(1 == callOnFloor_~floorID#1); 2820108#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2820328#L2707-5 assume { :end_inline_callOnFloor } true; 2824393#L3047-1 assume { :end_inline_initPersonOnFloor } true; 2808711#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 2808712#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 2815871#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2815872#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 2821721#L1702 assume 0 != timeShift_~tmp~16#1; 2819947#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2819948#L2632 assume !(0 == isFloorCalling_~floorID#1); 2809751#L2636 assume !(1 == isFloorCalling_~floorID#1); 2809752#L2640 assume !(2 == isFloorCalling_~floorID#1); 2820738#L2644 assume !(3 == isFloorCalling_~floorID#1); 2819423#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2819424#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2823332#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 2823333#L1417 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 2824177#L1391-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2824655#L680-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 2818967#L697-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 2807539#L718-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 2814584#L1402-1 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2814585#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 2821624#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2823838#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 2823238#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 2823239#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 2822658#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 2822659#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 2823751#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 2808948#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 2808949#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2819670#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 2821917#L1272 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 2822560#L1294 assume !(0 != ~floorButtons_0~0); 2820464#L1298 assume !(0 != ~floorButtons_1~0); 2820465#L1302 assume !(0 != ~floorButtons_2~0); 2820441#L1306 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 2809035#L1315 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 2809036#L1238 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2822095#L884-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 2810907#L1053-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 2807348#L1206-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 2808271#L1256 stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 2809136#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 2809137#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 2814855#L1329 assume !(1 == ~currentHeading~0); 2809369#L1339 assume !(0 == ~currentFloorID~0); 2809370#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2810955#L1345-1 assume { :end_inline_continueInDirection } true; 2819926#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2824707#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 2824700#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 2824701#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2824706#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 2824784#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2824785#L1992-2 [2021-12-06 23:26:57,725 INFO L793 eck$LassoCheckResult]: Loop: 2824785#L1992-2 assume !false; 2824782#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2824783#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2824809#L2001-2 assume !false; 2824791#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2824790#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2824785#L1992-2 [2021-12-06 23:26:57,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:57,725 INFO L85 PathProgramCache]: Analyzing trace with hash -1780644040, now seen corresponding path program 1 times [2021-12-06 23:26:57,725 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:57,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1754813103] [2021-12-06 23:26:57,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:57,726 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:57,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:57,751 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:26:57,752 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:26:57,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1754813103] [2021-12-06 23:26:57,752 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1754813103] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:57,752 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:57,752 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:57,752 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [342683952] [2021-12-06 23:26:57,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:57,752 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:26:57,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:57,752 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 19 times [2021-12-06 23:26:57,753 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:26:57,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [236400741] [2021-12-06 23:26:57,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:57,753 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:26:57,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:57,755 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:26:57,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:26:57,757 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:26:57,769 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:26:57,770 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:57,770 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:57,770 INFO L87 Difference]: Start difference. First operand 194276 states and 348670 transitions. cyclomatic complexity: 155094 Second operand has 3 states, 3 states have (on average 31.0) internal successors, (93), 2 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:26:59,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:59,890 INFO L93 Difference]: Finished difference Result 368405 states and 659753 transitions. [2021-12-06 23:26:59,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:59,891 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 368405 states and 659753 transitions. [2021-12-06 23:27:01,327 INFO L131 ngComponentsAnalysis]: Automaton has 1236 accepting balls. 141933 [2021-12-06 23:27:02,409 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 368405 states to 368405 states and 659753 transitions. [2021-12-06 23:27:02,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 367206 [2021-12-06 23:27:02,610 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 367206 [2021-12-06 23:27:02,610 INFO L73 IsDeterministic]: Start isDeterministic. Operand 368405 states and 659753 transitions. [2021-12-06 23:27:02,706 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:27:02,706 INFO L681 BuchiCegarLoop]: Abstraction has 368405 states and 659753 transitions. [2021-12-06 23:27:03,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368405 states and 659753 transitions. [2021-12-06 23:27:05,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368405 to 368373. [2021-12-06 23:27:05,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368373 states, 368373 states have (on average 1.7909048708781588) internal successors, (659721), 368372 states have internal predecessors, (659721), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:27:07,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368373 states to 368373 states and 659721 transitions. [2021-12-06 23:27:07,008 INFO L704 BuchiCegarLoop]: Abstraction has 368373 states and 659721 transitions. [2021-12-06 23:27:07,008 INFO L587 BuchiCegarLoop]: Abstraction has 368373 states and 659721 transitions. [2021-12-06 23:27:07,008 INFO L425 BuchiCegarLoop]: ======== Iteration 23============ [2021-12-06 23:27:07,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 368373 states and 659721 transitions. [2021-12-06 23:27:08,050 INFO L131 ngComponentsAnalysis]: Automaton has 1236 accepting balls. 141933 [2021-12-06 23:27:08,050 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:27:08,050 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:27:08,051 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:27:08,051 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:27:08,052 INFO L791 eck$LassoCheckResult]: Stem: 3381385#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~prevDir~0 := 0; 3377700#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret129#1, main_~retValue_acc~23#1, main_~tmp~27#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 3372865#L3440 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3372866#L3433 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 3375579#L3448 main_#t~ret129#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret129#1;havoc main_#t~ret129#1; 3375580#L2436 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 3387140#L2410 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret118#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 3384595#L3343 assume !(0 == getOrigin_~person#1); 3384596#L3347 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 3372896#L3368 aliceCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret118#1;havoc aliceCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3372897#L2903 assume !(0 == initPersonOnFloor_~floor#1); 3380622#L2930 assume !(1 == initPersonOnFloor_~floor#1); 3378570#L2957 assume !(2 == initPersonOnFloor_~floor#1); 3378571#L2984 assume 3 == initPersonOnFloor_~floor#1; 3380475#L2985 assume !(0 == initPersonOnFloor_~person#1); 3383541#L2988 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 3372493#L3011-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3377821#L2695 assume !(0 == callOnFloor_~floorID#1); 3377822#L2698 assume !(1 == callOnFloor_~floorID#1); 3377574#L2701 assume !(2 == callOnFloor_~floorID#1); 3377575#L2704 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 3382303#L2707-2 assume { :end_inline_callOnFloor } true; 3382304#L3047 assume { :end_inline_initPersonOnFloor } true; 3386671#L2171 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret119#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~28#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~28#1; 3386672#L3343-1 assume !(0 == getOrigin_~person#1); 3387568#L3347-1 assume !(1 == getOrigin_~person#1); 3372560#L3351-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~28#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~28#1; 3372561#L3368-1 angelinaCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret119#1;havoc angelinaCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3377470#L2903-1 assume !(0 == initPersonOnFloor_~floor#1); 3378125#L2930-1 assume !(1 == initPersonOnFloor_~floor#1); 3383943#L2957-1 assume 2 == initPersonOnFloor_~floor#1; 3375084#L2958-2 assume !(0 == initPersonOnFloor_~person#1); 3370021#L2961-2 assume !(1 == initPersonOnFloor_~person#1); 3370022#L2964-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 3375647#L3011-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3375648#L2695-2 assume !(0 == callOnFloor_~floorID#1); 3382843#L2698-2 assume !(1 == callOnFloor_~floorID#1); 3382844#L2701-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 3383068#L2707-5 assume { :end_inline_callOnFloor } true; 3387322#L3047-1 assume { :end_inline_initPersonOnFloor } true; 3371395#L2182 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret86#1, timeShift_~tmp~16#1;havoc timeShift_~tmp~16#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret136#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 3371396#L732 __utac_acc__Specification13_spec__1_#t~ret136#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret136#1;havoc __utac_acc__Specification13_spec__1_#t~ret136#1; 3378572#L3219 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 3378573#L689 timeShift_#t~ret86#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~16#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 3384516#L1702 assume 0 != timeShift_~tmp~16#1; 3382685#L1703 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret75#1, timeShift__wrappee__executivefloor_#t~ret76#1, timeShift__wrappee__executivefloor_#t~ret77#1, timeShift__wrappee__executivefloor_#t~ret78#1, timeShift__wrappee__executivefloor_#t~ret79#1, timeShift__wrappee__executivefloor_#t~ret80#1, timeShift__wrappee__executivefloor_#t~ret81#1, timeShift__wrappee__executivefloor_#t~ret82#1, timeShift__wrappee__executivefloor_#t~ret83#1, timeShift__wrappee__executivefloor_#t~ret84#1, timeShift__wrappee__executivefloor_#t~ret85#1, timeShift__wrappee__executivefloor_~tmp~15#1, timeShift__wrappee__executivefloor_~tmp___0~7#1, timeShift__wrappee__executivefloor_~tmp___1~3#1, timeShift__wrappee__executivefloor_~tmp___2~3#1, timeShift__wrappee__executivefloor_~tmp___3~3#1, timeShift__wrappee__executivefloor_~tmp___4~2#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~15#1;havoc timeShift__wrappee__executivefloor_~tmp___0~7#1;havoc timeShift__wrappee__executivefloor_~tmp___1~3#1;havoc timeShift__wrappee__executivefloor_~tmp___2~3#1;havoc timeShift__wrappee__executivefloor_~tmp___3~3#1;havoc timeShift__wrappee__executivefloor_~tmp___4~2#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1, stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 3382686#L2632 assume !(0 == isFloorCalling_~floorID#1); 3372432#L2636 assume !(1 == isFloorCalling_~floorID#1); 3372433#L2640 assume !(2 == isFloorCalling_~floorID#1); 3383484#L2644 assume !(3 == isFloorCalling_~floorID#1); 3382158#L2648 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 3382159#L2659 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 3386165#L2082 stopRequestedAtCurrentFloor_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret59#1;havoc stopRequestedAtCurrentFloor_#t~ret59#1; 3386166#L1417 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 3387087#L1391-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 3387607#L680-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret56#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 3381691#L697-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 3370227#L718-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 3377279#L1402-1 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 3377280#L1434 timeShift__wrappee__executivefloor_#t~ret75#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret75#1;havoc timeShift__wrappee__executivefloor_#t~ret75#1; 3384409#L1569 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 3386701#L1660 assume 1 == ~doorState~0;~doorState~0 := 0; 3386062#L1660-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret50#1, stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret115#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~24#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~24#1; 3386063#L2632-3 assume !(0 == isFloorCalling_~floorID#1); 3385476#L2636-3 assume !(1 == isFloorCalling_~floorID#1); 3385477#L2640-3 assume !(2 == isFloorCalling_~floorID#1); 3386596#L2644-3 assume !(3 == isFloorCalling_~floorID#1); 3371627#L2648-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~24#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~24#1; 3371628#L2659-3 isExecutiveFloorCalling_#t~ret115#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret115#1;havoc isExecutiveFloorCalling_#t~ret115#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 3382402#L2082-1 stopRequestedInDirection_#t~ret50#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret50#1;havoc stopRequestedInDirection_#t~ret50#1; 3384716#L1272 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 3385375#L1294 assume !(0 != ~floorButtons_0~0); 3383202#L1298 assume !(0 != ~floorButtons_1~0); 3383203#L1302 assume !(0 != ~floorButtons_2~0); 3383177#L1306 assume !(0 != ~floorButtons_3~0); 3383178#L1310 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~14#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 3371716#L1315 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret46#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 3371717#L1238 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 3384898#L884-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 3373596#L1053-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 3370035#L1206-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 3370954#L1256 stopRequestedInDirection_#t~ret52#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 3371820#L1285 timeShift__wrappee__executivefloor_#t~ret82#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret82#1;havoc timeShift__wrappee__executivefloor_#t~ret82#1; 3371821#L1668 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret53#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 3377553#L1329 assume !(1 == ~currentHeading~0); 3372052#L1339 assume !(0 == ~currentFloorID~0); 3372053#L1339-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3373644#L1345-1 assume { :end_inline_continueInDirection } true; 3382664#L1677-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 3387664#L1702-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret137#1, __utac_acc__Specification13_spec__2_#t~ret138#1, __utac_acc__Specification13_spec__2_#t~ret139#1, __utac_acc__Specification13_spec__2_#t~ret140#1, __utac_acc__Specification13_spec__2_#t~ret141#1, __utac_acc__Specification13_spec__2_#t~ret142#1, __utac_acc__Specification13_spec__2_~tmp~30#1, __utac_acc__Specification13_spec__2_~tmp___0~13#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;havoc __utac_acc__Specification13_spec__2_~tmp~30#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~8#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~7#1 / 3); 3387657#L3236 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~8#1; 3387658#L3237 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~19#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~19#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 3387663#L1922 assume !(1 == existInLiftCallsInDirection_~d#1); 3387710#L1988 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 3387711#L1992-2 [2021-12-06 23:27:08,052 INFO L793 eck$LassoCheckResult]: Loop: 3387711#L1992-2 assume !false; 3387708#L1993 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 3387709#L1994 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 3387799#L2001-2 assume !false; 3387789#L2002 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 3387781#L2060 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 3387711#L1992-2 [2021-12-06 23:27:08,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:27:08,052 INFO L85 PathProgramCache]: Analyzing trace with hash 719178658, now seen corresponding path program 1 times [2021-12-06 23:27:08,052 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:27:08,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697186313] [2021-12-06 23:27:08,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:27:08,052 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:27:08,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:27:08,089 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:27:08,089 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:27:08,089 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697186313] [2021-12-06 23:27:08,090 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697186313] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:27:08,090 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:27:08,090 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:27:08,090 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765713882] [2021-12-06 23:27:08,090 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:27:08,090 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:27:08,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:27:08,090 INFO L85 PathProgramCache]: Analyzing trace with hash 954762475, now seen corresponding path program 20 times [2021-12-06 23:27:08,090 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:27:08,090 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1062760185] [2021-12-06 23:27:08,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:27:08,091 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:27:08,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:27:08,092 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:27:08,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:27:08,095 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:27:08,105 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:27:08,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:27:08,105 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:27:08,105 INFO L87 Difference]: Start difference. First operand 368373 states and 659721 transitions. cyclomatic complexity: 292656 Second operand has 6 states, 6 states have (on average 15.666666666666666) internal successors, (94), 5 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:27:16,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:27:16,868 INFO L93 Difference]: Finished difference Result 1879983 states and 3377658 transitions. [2021-12-06 23:27:16,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 23:27:16,869 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1879983 states and 3377658 transitions. [2021-12-06 23:27:25,223 INFO L131 ngComponentsAnalysis]: Automaton has 7544 accepting balls. 951067 [2021-12-06 23:27:31,604 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1879983 states to 1879983 states and 3377658 transitions. [2021-12-06 23:27:31,605 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1878441 [2021-12-06 23:27:32,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1878441 [2021-12-06 23:27:32,506 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1879983 states and 3377658 transitions. [2021-12-06 23:27:33,202 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:27:33,202 INFO L681 BuchiCegarLoop]: Abstraction has 1879983 states and 3377658 transitions. [2021-12-06 23:27:34,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1879983 states and 3377658 transitions. [2021-12-06 23:27:42,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1879983 to 668532. [2021-12-06 23:27:43,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 668532 states, 668532 states have (on average 1.7888223749947647) internal successors, (1195885), 668531 states have internal predecessors, (1195885), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)