./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7c9485412041f5ced738777edbcc586e5ce326d6f265b136a50fe41e5db19fb --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:05:06,782 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:05:06,784 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:05:06,816 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:05:06,817 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:05:06,818 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:05:06,819 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:05:06,822 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:05:06,824 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:05:06,825 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:05:06,826 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:05:06,827 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:05:06,828 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:05:06,829 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:05:06,830 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:05:06,832 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:05:06,833 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:05:06,834 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:05:06,836 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:05:06,838 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:05:06,840 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:05:06,842 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:05:06,843 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:05:06,844 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:05:06,848 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:05:06,848 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:05:06,849 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:05:06,850 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:05:06,850 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:05:06,851 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:05:06,852 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:05:06,853 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:05:06,853 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:05:06,854 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:05:06,854 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:05:06,855 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:05:06,855 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:05:06,855 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:05:06,855 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:05:06,856 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:05:06,857 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:05:06,857 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-06 23:05:06,876 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:05:06,876 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:05:06,876 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:05:06,876 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:05:06,877 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:05:06,877 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:05:06,877 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:05:06,878 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-06 23:05:06,878 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-06 23:05:06,878 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-06 23:05:06,878 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-06 23:05:06,878 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-06 23:05:06,878 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-06 23:05:06,878 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:05:06,878 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-06 23:05:06,879 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 23:05:06,880 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:05:06,880 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-06 23:05:06,880 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:05:06,880 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-06 23:05:06,880 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:05:06,880 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:05:06,880 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:05:06,881 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:05:06,881 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:05:06,881 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-06 23:05:06,881 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7c9485412041f5ced738777edbcc586e5ce326d6f265b136a50fe41e5db19fb [2021-12-06 23:05:07,053 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:05:07,070 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:05:07,072 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:05:07,072 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:05:07,073 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:05:07,074 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c [2021-12-06 23:05:07,122 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/data/50c264034/64b8b00b36ee4cd9827cbebb466e13f8/FLAGc6ffb6737 [2021-12-06 23:05:07,580 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:05:07,580 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c [2021-12-06 23:05:07,595 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/data/50c264034/64b8b00b36ee4cd9827cbebb466e13f8/FLAGc6ffb6737 [2021-12-06 23:05:07,606 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/data/50c264034/64b8b00b36ee4cd9827cbebb466e13f8 [2021-12-06 23:05:07,608 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:05:07,609 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:05:07,610 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:05:07,610 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:05:07,613 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:05:07,613 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:05:07" (1/1) ... [2021-12-06 23:05:07,614 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3a218995 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:07, skipping insertion in model container [2021-12-06 23:05:07,614 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:05:07" (1/1) ... [2021-12-06 23:05:07,619 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:05:07,667 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:05:07,779 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c[1546,1559] [2021-12-06 23:05:07,978 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:05:07,986 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:05:07,995 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c[1546,1559] [2021-12-06 23:05:08,055 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:05:08,075 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:05:08,076 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08 WrapperNode [2021-12-06 23:05:08,076 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:05:08,077 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:05:08,077 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:05:08,077 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:05:08,082 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:08,103 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:08,608 INFO L137 Inliner]: procedures = 97, calls = 354, calls flagged for inlining = 206, calls inlined = 2055, statements flattened = 69864 [2021-12-06 23:05:08,608 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:05:08,609 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:05:08,609 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:05:08,609 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:05:08,617 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:08,617 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:08,704 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:08,704 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:08,973 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:09,228 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:09,352 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:09,620 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:05:09,620 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:05:09,621 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:05:09,621 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:05:09,621 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (1/1) ... [2021-12-06 23:05:09,628 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:09,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:09,647 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:09,649 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-06 23:05:09,686 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:05:09,686 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:05:09,686 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:05:09,686 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:05:09,845 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:05:09,847 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:05:21,093 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:05:21,161 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:05:21,161 INFO L301 CfgBuilder]: Removed 61 assume(true) statements. [2021-12-06 23:05:21,175 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:05:21 BoogieIcfgContainer [2021-12-06 23:05:21,175 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:05:21,176 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-06 23:05:21,176 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-06 23:05:21,179 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-06 23:05:21,179 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 23:05:21,179 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 06.12 11:05:07" (1/3) ... [2021-12-06 23:05:21,180 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7270c9b6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.12 11:05:21, skipping insertion in model container [2021-12-06 23:05:21,180 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 23:05:21,180 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:08" (2/3) ... [2021-12-06 23:05:21,180 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7270c9b6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.12 11:05:21, skipping insertion in model container [2021-12-06 23:05:21,180 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-06 23:05:21,180 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:05:21" (3/3) ... [2021-12-06 23:05:21,181 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product32.cil.c [2021-12-06 23:05:21,214 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-06 23:05:21,214 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-06 23:05:21,214 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-06 23:05:21,214 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-06 23:05:21,214 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-06 23:05:21,214 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-06 23:05:21,214 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-06 23:05:21,214 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-06 23:05:21,429 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 18482 states, 18481 states have (on average 1.8746279963205454) internal successors, (34645), 18481 states have internal predecessors, (34645), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:21,676 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:21,676 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:21,676 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:21,684 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:21,684 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:21,684 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-06 23:05:21,715 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 18482 states, 18481 states have (on average 1.8746279963205454) internal successors, (34645), 18481 states have internal predecessors, (34645), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:21,849 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:21,849 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:21,849 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:21,851 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:21,851 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:21,856 INFO L791 eck$LassoCheckResult]: Stem: 7529#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4611#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 3817#L1414true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 11721#L1407true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2842#L1422true main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 3985#L591true assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 14601#L564true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 6777#L1317true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 11788#L1342true aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13494#L964true assume 0 == initPersonOnFloor_~floor#1; 17884#L965true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 384#L1072-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 13215#L756true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 11192#L768-2true assume { :end_inline_callOnFloor } true; 11976#L1108true assume { :end_inline_initPersonOnFloor } true; 941#L324true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 14638#L1317-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 17107#L1342-1true angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 820#L964-1true assume 0 == initPersonOnFloor_~floor#1; 6159#L965-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5685#L1072-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 10079#L756-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6978#L768-5true assume { :end_inline_callOnFloor } true; 5143#L1108-1true assume { :end_inline_initPersonOnFloor } true; 4458#L335true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 15889#L2092true __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 4948#L170true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 9012#L2049true timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 977#L3060true assume 0 != timeShift_~tmp~29#1; 9959#L3061true assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 9244#L3060-1true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 17948#L188true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 7633#L189true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2914#L3280true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~3#1 := 0;existInLiftCallsInDirection_~i~3#1 := 1 + ~currentFloorID~0; 15184#L3284-2true [2021-12-06 23:05:21,856 INFO L793 eck$LassoCheckResult]: Loop: 15184#L3284-2true assume !false; 3443#L3285true assume existInLiftCallsInDirection_~i~3#1 < 5; 5593#L3286true assume !(0 == existInLiftCallsInDirection_~i~3#1); 11228#L3299true assume !(1 == existInLiftCallsInDirection_~i~3#1); 11514#L3308true assume !(2 == existInLiftCallsInDirection_~i~3#1); 17188#L3317true assume !(3 == existInLiftCallsInDirection_~i~3#1); 15230#L3326true assume !(4 == existInLiftCallsInDirection_~i~3#1); 3542#L3327-1true existInLiftCallsInDirection_~i~3#1 := 1 + existInLiftCallsInDirection_~i~3#1; 15184#L3284-2true [2021-12-06 23:05:21,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:21,862 INFO L85 PathProgramCache]: Analyzing trace with hash -1516016117, now seen corresponding path program 1 times [2021-12-06 23:05:21,871 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:21,871 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1853304291] [2021-12-06 23:05:21,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:21,873 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:21,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:22,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:22,101 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:22,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1853304291] [2021-12-06 23:05:22,102 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1853304291] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:22,102 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:22,103 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:05:22,104 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024110830] [2021-12-06 23:05:22,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:22,109 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:22,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:22,110 INFO L85 PathProgramCache]: Analyzing trace with hash 1774605181, now seen corresponding path program 1 times [2021-12-06 23:05:22,110 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:22,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [223171952] [2021-12-06 23:05:22,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:22,111 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:22,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:22,119 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:22,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:22,142 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:22,187 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:05:22,187 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:05:22,187 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:05:22,187 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:05:22,188 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 23:05:22,188 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:22,188 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:05:22,188 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:05:22,188 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration1_Loop [2021-12-06 23:05:22,188 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:05:22,188 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:05:22,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:22,247 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:05:22,247 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 23:05:22,249 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:22,249 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:22,250 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:22,251 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-06 23:05:22,252 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:05:22,252 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:05:22,292 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:05:22,293 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:22,293 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:22,293 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:22,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-06 23:05:22,295 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 23:05:22,295 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:05:22,344 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 23:05:22,346 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-06 23:05:22,346 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:05:22,347 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:05:22,347 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:05:22,347 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:05:22,347 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 23:05:22,347 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:22,347 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:05:22,348 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:05:22,348 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration1_Loop [2021-12-06 23:05:22,348 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:05:22,348 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:05:22,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:22,383 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:05:22,387 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 23:05:22,389 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:22,389 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:22,390 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:22,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-06 23:05:22,391 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:05:22,398 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:05:22,399 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:05:22,399 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:05:22,399 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:05:22,399 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:05:22,402 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:05:22,402 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:05:22,404 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 23:05:22,409 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-06 23:05:22,410 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-12-06 23:05:22,411 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:22,411 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:22,412 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:22,420 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-06 23:05:22,441 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 23:05:22,441 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 23:05:22,441 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 23:05:22,442 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~3#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~3#1 Supporting invariants [] [2021-12-06 23:05:22,473 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2021-12-06 23:05:22,475 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 23:05:22,489 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:22,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:22,558 INFO L263 TraceCheckSpWp]: Trace formula consists of 545 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:05:22,560 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:05:22,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:22,619 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:05:22,620 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:05:22,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:22,785 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-06 23:05:22,810 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 18482 states, 18481 states have (on average 1.8746279963205454) internal successors, (34645), 18481 states have internal predecessors, (34645), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:23,609 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2021-12-06 23:05:29,033 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 18482 states, 18481 states have (on average 1.8746279963205454) internal successors, (34645), 18481 states have internal predecessors, (34645), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 217756 states and 408017 transitions. Complement of second has 18 states. [2021-12-06 23:05:29,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-06 23:05:29,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:29,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 221339 transitions. [2021-12-06 23:05:29,213 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 221339 transitions. Stem has 34 letters. Loop has 8 letters. [2021-12-06 23:05:29,214 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:29,214 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 221339 transitions. Stem has 42 letters. Loop has 8 letters. [2021-12-06 23:05:29,214 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:29,214 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 221339 transitions. Stem has 34 letters. Loop has 16 letters. [2021-12-06 23:05:29,215 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:29,215 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 217756 states and 408017 transitions. [2021-12-06 23:05:30,081 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 29608 [2021-12-06 23:05:30,625 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 217756 states to 118005 states and 221062 transitions. [2021-12-06 23:05:30,626 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117975 [2021-12-06 23:05:30,723 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117976 [2021-12-06 23:05:30,723 INFO L73 IsDeterministic]: Start isDeterministic. Operand 118005 states and 221062 transitions. [2021-12-06 23:05:30,724 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:30,724 INFO L681 BuchiCegarLoop]: Abstraction has 118005 states and 221062 transitions. [2021-12-06 23:05:30,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118005 states and 221062 transitions. [2021-12-06 23:05:31,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118005 to 33236. [2021-12-06 23:05:31,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33236 states, 33236 states have (on average 1.87089300758214) internal successors, (62181), 33235 states have internal predecessors, (62181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:31,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33236 states to 33236 states and 62181 transitions. [2021-12-06 23:05:31,908 INFO L704 BuchiCegarLoop]: Abstraction has 33236 states and 62181 transitions. [2021-12-06 23:05:31,908 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:31,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:05:31,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:05:31,912 INFO L87 Difference]: Start difference. First operand 33236 states and 62181 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:32,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:32,717 INFO L93 Difference]: Finished difference Result 48015 states and 89681 transitions. [2021-12-06 23:05:32,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:32,718 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48015 states and 89681 transitions. [2021-12-06 23:05:32,910 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 15906 [2021-12-06 23:05:33,061 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48015 states to 48002 states and 89668 transitions. [2021-12-06 23:05:33,061 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47983 [2021-12-06 23:05:33,110 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47983 [2021-12-06 23:05:33,110 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48002 states and 89668 transitions. [2021-12-06 23:05:33,111 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:33,111 INFO L681 BuchiCegarLoop]: Abstraction has 48002 states and 89668 transitions. [2021-12-06 23:05:33,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48002 states and 89668 transitions. [2021-12-06 23:05:33,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48002 to 18479. [2021-12-06 23:05:33,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18479 states, 18479 states have (on average 1.8680123383299962) internal successors, (34519), 18478 states have internal predecessors, (34519), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:33,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18479 states to 18479 states and 34519 transitions. [2021-12-06 23:05:33,491 INFO L704 BuchiCegarLoop]: Abstraction has 18479 states and 34519 transitions. [2021-12-06 23:05:33,491 INFO L587 BuchiCegarLoop]: Abstraction has 18479 states and 34519 transitions. [2021-12-06 23:05:33,491 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-06 23:05:33,491 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18479 states and 34519 transitions. [2021-12-06 23:05:33,546 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:33,547 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:33,547 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:33,548 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:33,548 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:33,549 INFO L791 eck$LassoCheckResult]: Stem: 330483#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 326737#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 325481#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 325482#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 323816#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 323817#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 325738#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 329637#L1317 assume !(0 == getOrigin_~person#1); 329084#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 326601#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 334062#L964 assume 0 == initPersonOnFloor_~floor#1; 335052#L965 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 318688#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 318689#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 319028#L768-2 assume { :end_inline_callOnFloor } true; 333682#L1108 assume { :end_inline_initPersonOnFloor } true; 320034#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 320035#L1317-1 assume !(0 == getOrigin_~person#1); 329474#L1321-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 327874#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 319754#L964-1 assume 0 == initPersonOnFloor_~floor#1; 319755#L965-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 317670#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 328238#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 324861#L768-5 assume { :end_inline_callOnFloor } true; 327499#L1108-1 assume { :end_inline_initPersonOnFloor } true; 326470#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 326471#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 327216#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 327217#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 320114#L3060 assume 0 != timeShift_~tmp~29#1; 320116#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 332144#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 332145#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 330594#L189 assume !(1 == ~prevDir~0); 330595#L215 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 321489#L3280-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~3#1 := 0;existInLiftCallsInDirection_~i~3#1 := 1 + ~currentFloorID~0; 321491#L3284-8 [2021-12-06 23:05:33,549 INFO L793 eck$LassoCheckResult]: Loop: 321491#L3284-8 assume !false; 329684#L3285-2 assume existInLiftCallsInDirection_~i~3#1 < 5; 329685#L3286-2 assume !(0 == existInLiftCallsInDirection_~i~3#1); 325502#L3299-2 assume !(1 == existInLiftCallsInDirection_~i~3#1); 319392#L3308-2 assume !(2 == existInLiftCallsInDirection_~i~3#1); 326695#L3317-2 assume !(3 == existInLiftCallsInDirection_~i~3#1); 324038#L3326-2 assume !(4 == existInLiftCallsInDirection_~i~3#1); 335397#L3327-5 existInLiftCallsInDirection_~i~3#1 := 1 + existInLiftCallsInDirection_~i~3#1; 321491#L3284-8 [2021-12-06 23:05:33,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:33,549 INFO L85 PathProgramCache]: Analyzing trace with hash -1974373456, now seen corresponding path program 1 times [2021-12-06 23:05:33,550 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:33,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883776579] [2021-12-06 23:05:33,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:33,550 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:33,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:33,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:33,616 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:33,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883776579] [2021-12-06 23:05:33,617 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883776579] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:33,617 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:33,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:05:33,617 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660811713] [2021-12-06 23:05:33,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:33,618 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:33,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:33,619 INFO L85 PathProgramCache]: Analyzing trace with hash -443123075, now seen corresponding path program 1 times [2021-12-06 23:05:33,619 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:33,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [415133042] [2021-12-06 23:05:33,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:33,619 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:33,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:33,625 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:33,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:33,634 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:33,659 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:05:33,659 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:05:33,659 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:05:33,659 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:05:33,659 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 23:05:33,659 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:33,659 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:05:33,659 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:05:33,659 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration2_Loop [2021-12-06 23:05:33,659 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:05:33,659 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:05:33,660 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:33,693 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:05:33,693 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 23:05:33,693 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:33,693 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:33,694 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:33,695 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-06 23:05:33,696 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:05:33,696 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:05:33,721 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-12-06 23:05:33,722 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:33,722 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:33,722 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:33,723 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-06 23:05:33,724 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 23:05:33,724 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:05:33,754 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 23:05:33,757 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2021-12-06 23:05:33,757 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:05:33,757 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:05:33,757 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:05:33,757 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:05:33,757 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 23:05:33,757 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:33,758 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:05:33,758 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:05:33,758 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration2_Loop [2021-12-06 23:05:33,758 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:05:33,758 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:05:33,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:33,791 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:05:33,791 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 23:05:33,791 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:33,791 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:33,792 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:33,794 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-06 23:05:33,795 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:05:33,802 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:05:33,802 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:05:33,802 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:05:33,802 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:05:33,802 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:05:33,803 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:05:33,803 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:05:33,804 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 23:05:33,807 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-06 23:05:33,807 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-12-06 23:05:33,807 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:33,807 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:33,808 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:33,809 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-06 23:05:33,809 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 23:05:33,809 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 23:05:33,809 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 23:05:33,810 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~3#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~3#1 Supporting invariants [] [2021-12-06 23:05:33,827 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2021-12-06 23:05:33,828 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 23:05:33,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:33,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:33,888 INFO L263 TraceCheckSpWp]: Trace formula consists of 548 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:05:33,890 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:05:33,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:33,943 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:05:33,944 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:05:34,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:34,061 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-06 23:05:34,062 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 18479 states and 34519 transitions. cyclomatic complexity: 16074 Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:34,711 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-12-06 23:05:39,603 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 18479 states and 34519 transitions. cyclomatic complexity: 16074. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 202763 states and 379773 transitions. Complement of second has 17 states. [2021-12-06 23:05:39,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-06 23:05:39,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:39,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 193304 transitions. [2021-12-06 23:05:39,742 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 193304 transitions. Stem has 37 letters. Loop has 8 letters. [2021-12-06 23:05:39,742 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:39,742 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 193304 transitions. Stem has 45 letters. Loop has 8 letters. [2021-12-06 23:05:39,743 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:39,743 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 193304 transitions. Stem has 37 letters. Loop has 16 letters. [2021-12-06 23:05:39,743 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:39,743 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 202763 states and 379773 transitions. [2021-12-06 23:05:40,415 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 29608 [2021-12-06 23:05:41,023 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 202763 states to 118011 states and 220969 transitions. [2021-12-06 23:05:41,024 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117962 [2021-12-06 23:05:41,082 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117963 [2021-12-06 23:05:41,082 INFO L73 IsDeterministic]: Start isDeterministic. Operand 118011 states and 220969 transitions. [2021-12-06 23:05:41,094 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:41,094 INFO L681 BuchiCegarLoop]: Abstraction has 118011 states and 220969 transitions. [2021-12-06 23:05:41,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118011 states and 220969 transitions. [2021-12-06 23:05:41,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118011 to 18503. [2021-12-06 23:05:41,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18503 states, 18503 states have (on average 1.8676430849051504) internal successors, (34557), 18502 states have internal predecessors, (34557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:41,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18503 states to 18503 states and 34557 transitions. [2021-12-06 23:05:41,628 INFO L704 BuchiCegarLoop]: Abstraction has 18503 states and 34557 transitions. [2021-12-06 23:05:41,628 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:41,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:05:41,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:05:41,629 INFO L87 Difference]: Start difference. First operand 18503 states and 34557 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:42,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:42,644 INFO L93 Difference]: Finished difference Result 55292 states and 103241 transitions. [2021-12-06 23:05:42,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:42,645 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55292 states and 103241 transitions. [2021-12-06 23:05:42,967 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12558 [2021-12-06 23:05:43,111 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55292 states to 55292 states and 103241 transitions. [2021-12-06 23:05:43,111 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55178 [2021-12-06 23:05:43,138 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55178 [2021-12-06 23:05:43,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55292 states and 103241 transitions. [2021-12-06 23:05:43,139 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:43,139 INFO L681 BuchiCegarLoop]: Abstraction has 55292 states and 103241 transitions. [2021-12-06 23:05:43,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55292 states and 103241 transitions. [2021-12-06 23:05:43,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55292 to 18518. [2021-12-06 23:05:43,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18518 states, 18518 states have (on average 1.8669402743276813) internal successors, (34572), 18517 states have internal predecessors, (34572), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:43,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18518 states to 18518 states and 34572 transitions. [2021-12-06 23:05:43,416 INFO L704 BuchiCegarLoop]: Abstraction has 18518 states and 34572 transitions. [2021-12-06 23:05:43,416 INFO L587 BuchiCegarLoop]: Abstraction has 18518 states and 34572 transitions. [2021-12-06 23:05:43,416 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-06 23:05:43,417 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18518 states and 34572 transitions. [2021-12-06 23:05:43,459 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4186 [2021-12-06 23:05:43,459 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:43,459 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:43,461 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:43,461 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:43,461 INFO L791 eck$LassoCheckResult]: Stem: 625714#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 621961#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 620700#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 620701#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 619032#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 619033#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 620959#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 624866#L1317 assume !(0 == getOrigin_~person#1); 624311#L1321 assume !(1 == getOrigin_~person#1); 624313#L1325 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 621823#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 631386#L964 assume 0 == initPersonOnFloor_~floor#1; 631364#L965 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 613905#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 613906#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 614245#L768-2 assume { :end_inline_callOnFloor } true; 628915#L1108 assume { :end_inline_initPersonOnFloor } true; 615252#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 615253#L1317-1 assume !(0 == getOrigin_~person#1); 624702#L1321-1 assume !(1 == getOrigin_~person#1); 623099#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 623100#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 631392#L964-1 assume 0 == initPersonOnFloor_~floor#1; 624103#L965-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 612888#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 623464#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 620080#L768-5 assume { :end_inline_callOnFloor } true; 622723#L1108-1 assume { :end_inline_initPersonOnFloor } true; 621692#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 621693#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 622439#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 622440#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 615332#L3060 assume 0 != timeShift_~tmp~29#1; 615334#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 627377#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 627378#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 625825#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 619166#L3280 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~3#1 := 0;existInLiftCallsInDirection_~i~3#1 := 1 + ~currentFloorID~0; 619167#L3284-2 assume !false; 620065#L3285 [2021-12-06 23:05:43,461 INFO L793 eck$LassoCheckResult]: Loop: 620065#L3285 assume existInLiftCallsInDirection_~i~3#1 < 5; 620067#L3286 assume !(0 == existInLiftCallsInDirection_~i~3#1); 623337#L3299 assume 1 == existInLiftCallsInDirection_~i~3#1; 623947#L3301 assume !(0 != ~floorButtons_1~0); 623948#L3308 assume !(2 == existInLiftCallsInDirection_~i~3#1); 621574#L3317 assume !(3 == existInLiftCallsInDirection_~i~3#1); 623205#L3326 assume !(4 == existInLiftCallsInDirection_~i~3#1); 620235#L3327-1 existInLiftCallsInDirection_~i~3#1 := 1 + existInLiftCallsInDirection_~i~3#1; 620236#L3284-2 assume !false; 620065#L3285 [2021-12-06 23:05:43,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:43,462 INFO L85 PathProgramCache]: Analyzing trace with hash 1800201023, now seen corresponding path program 1 times [2021-12-06 23:05:43,462 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:43,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1798784336] [2021-12-06 23:05:43,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:43,462 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:43,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:43,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:43,503 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:43,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1798784336] [2021-12-06 23:05:43,504 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1798784336] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:43,504 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:43,504 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:05:43,504 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [829595287] [2021-12-06 23:05:43,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:43,504 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:43,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:43,505 INFO L85 PathProgramCache]: Analyzing trace with hash 917806602, now seen corresponding path program 1 times [2021-12-06 23:05:43,505 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:43,505 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1529564764] [2021-12-06 23:05:43,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:43,505 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:43,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:43,508 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:43,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:43,513 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:43,527 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:05:43,528 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:05:43,528 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:05:43,528 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:05:43,528 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-06 23:05:43,528 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:43,528 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:05:43,528 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:05:43,528 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration3_Loop [2021-12-06 23:05:43,528 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:05:43,528 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:05:43,529 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:43,531 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:43,545 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:05:43,545 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-06 23:05:43,545 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:43,545 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:43,546 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:43,546 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-12-06 23:05:43,547 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-06 23:05:43,547 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:05:43,573 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2021-12-06 23:05:43,573 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:43,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:43,574 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:43,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-12-06 23:05:43,575 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-06 23:05:43,576 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-06 23:05:43,584 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-06 23:05:43,602 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2021-12-06 23:05:43,603 INFO L210 LassoAnalysis]: Preferences: [2021-12-06 23:05:43,603 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-06 23:05:43,603 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-06 23:05:43,603 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-06 23:05:43,603 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-06 23:05:43,603 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:43,603 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-06 23:05:43,603 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-06 23:05:43,603 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration3_Loop [2021-12-06 23:05:43,603 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-06 23:05:43,603 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-06 23:05:43,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:43,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-06 23:05:43,620 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-06 23:05:43,620 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-06 23:05:43,620 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:43,621 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:43,621 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:43,622 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-12-06 23:05:43,622 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-06 23:05:43,629 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-06 23:05:43,629 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-06 23:05:43,629 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-06 23:05:43,630 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-06 23:05:43,630 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-06 23:05:43,631 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-06 23:05:43,631 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-06 23:05:43,632 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-06 23:05:43,634 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-06 23:05:43,634 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-06 23:05:43,634 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-06 23:05:43,635 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:43,635 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:43,636 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-12-06 23:05:43,636 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-06 23:05:43,636 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-06 23:05:43,636 INFO L513 LassoAnalysis]: Proved termination. [2021-12-06 23:05:43,636 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~3#1) = -2*ULTIMATE.start_existInLiftCallsInDirection_~i~3#1 + 3 Supporting invariants [] [2021-12-06 23:05:43,654 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2021-12-06 23:05:43,654 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-06 23:05:43,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:43,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:43,708 INFO L263 TraceCheckSpWp]: Trace formula consists of 550 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:05:43,709 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:05:43,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:43,759 INFO L263 TraceCheckSpWp]: Trace formula consists of 14 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:05:43,759 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:05:43,819 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:43,819 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2021-12-06 23:05:43,820 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 18518 states and 34572 transitions. cyclomatic complexity: 16089 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:44,473 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ef267383-68f6-4524-8f40-86c225464b41/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2021-12-06 23:05:45,978 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 18518 states and 34572 transitions. cyclomatic complexity: 16089. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 104618 states and 195695 transitions. Complement of second has 8 states. [2021-12-06 23:05:45,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 2 non-accepting loop states 1 accepting loop states [2021-12-06 23:05:45,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:46,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 114982 transitions. [2021-12-06 23:05:46,087 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 114982 transitions. Stem has 39 letters. Loop has 9 letters. [2021-12-06 23:05:46,088 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:46,088 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 114982 transitions. Stem has 48 letters. Loop has 9 letters. [2021-12-06 23:05:46,088 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:46,088 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 114982 transitions. Stem has 39 letters. Loop has 18 letters. [2021-12-06 23:05:46,088 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-06 23:05:46,089 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104618 states and 195695 transitions. [2021-12-06 23:05:46,527 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 15378 [2021-12-06 23:05:46,728 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104618 states to 61565 states and 115126 transitions. [2021-12-06 23:05:46,728 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61483 [2021-12-06 23:05:46,771 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61486 [2021-12-06 23:05:46,772 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61565 states and 115126 transitions. [2021-12-06 23:05:46,810 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:46,810 INFO L681 BuchiCegarLoop]: Abstraction has 61565 states and 115126 transitions. [2021-12-06 23:05:46,980 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61565 states and 115126 transitions. [2021-12-06 23:05:47,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61565 to 18560. [2021-12-06 23:05:47,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18560 states, 18560 states have (on average 1.8657327586206895) internal successors, (34628), 18559 states have internal predecessors, (34628), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:47,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18560 states to 18560 states and 34628 transitions. [2021-12-06 23:05:47,242 INFO L704 BuchiCegarLoop]: Abstraction has 18560 states and 34628 transitions. [2021-12-06 23:05:47,242 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:47,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:05:47,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:05:47,243 INFO L87 Difference]: Start difference. First operand 18560 states and 34628 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:47,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:47,558 INFO L93 Difference]: Finished difference Result 36941 states and 68929 transitions. [2021-12-06 23:05:47,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:05:47,559 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 36941 states and 68929 transitions. [2021-12-06 23:05:47,691 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 8364 [2021-12-06 23:05:47,799 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 36941 states to 36941 states and 68929 transitions. [2021-12-06 23:05:47,799 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36783 [2021-12-06 23:05:47,826 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36783 [2021-12-06 23:05:47,826 INFO L73 IsDeterministic]: Start isDeterministic. Operand 36941 states and 68929 transitions. [2021-12-06 23:05:47,830 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:47,831 INFO L681 BuchiCegarLoop]: Abstraction has 36941 states and 68929 transitions. [2021-12-06 23:05:47,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36941 states and 68929 transitions. [2021-12-06 23:05:48,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36941 to 18526. [2021-12-06 23:05:48,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18526 states, 18526 states have (on average 1.865486343517219) internal successors, (34560), 18525 states have internal predecessors, (34560), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:48,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18526 states to 18526 states and 34560 transitions. [2021-12-06 23:05:48,088 INFO L704 BuchiCegarLoop]: Abstraction has 18526 states and 34560 transitions. [2021-12-06 23:05:48,088 INFO L587 BuchiCegarLoop]: Abstraction has 18526 states and 34560 transitions. [2021-12-06 23:05:48,088 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-06 23:05:48,088 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18526 states and 34560 transitions. [2021-12-06 23:05:48,132 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:48,132 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:48,132 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:48,133 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:48,133 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:48,133 INFO L791 eck$LassoCheckResult]: Stem: 804501#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 800756#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 799501#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 799502#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 797836#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 797837#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 799760#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 803655#L1317 assume !(0 == getOrigin_~person#1); 803101#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 803102#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 808079#L964 assume !(0 == initPersonOnFloor_~floor#1); 809065#L991 assume !(1 == initPersonOnFloor_~floor#1); 801072#L1018 assume !(2 == initPersonOnFloor_~floor#1); 795602#L1045 assume 3 == initPersonOnFloor_~floor#1; 795603#L1046 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 792711#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 792712#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 793051#L768-2 assume { :end_inline_callOnFloor } true; 807698#L1108 assume { :end_inline_initPersonOnFloor } true; 794061#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 794062#L1317-1 assume !(0 == getOrigin_~person#1); 803491#L1321-1 assume !(1 == getOrigin_~person#1); 801891#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 801892#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 810168#L964-1 assume 0 == initPersonOnFloor_~floor#1; 802894#L965-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 791694#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 802257#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 798881#L768-5 assume { :end_inline_callOnFloor } true; 801516#L1108-1 assume { :end_inline_initPersonOnFloor } true; 800492#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 800493#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 801234#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 801235#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 794138#L3060 assume 0 != timeShift_~tmp~29#1; 794140#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 806164#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 806165#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 804614#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 797970#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 797972#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 801922#L3350-2 [2021-12-06 23:05:48,133 INFO L793 eck$LassoCheckResult]: Loop: 801922#L3350-2 assume !false; 810066#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 808282#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 808283#L3359-2 assume !false; 795254#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 795255#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 801922#L3350-2 [2021-12-06 23:05:48,134 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:48,134 INFO L85 PathProgramCache]: Analyzing trace with hash 790460044, now seen corresponding path program 1 times [2021-12-06 23:05:48,134 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:48,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [581779203] [2021-12-06 23:05:48,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:48,134 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:48,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:48,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:48,169 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:48,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [581779203] [2021-12-06 23:05:48,169 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [581779203] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:48,169 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:48,169 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:05:48,169 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1440310614] [2021-12-06 23:05:48,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:48,170 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:48,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:48,170 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 1 times [2021-12-06 23:05:48,170 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:48,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1080034708] [2021-12-06 23:05:48,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:48,170 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:48,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:48,173 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:48,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:48,178 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:48,190 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:48,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:05:48,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:05:48,190 INFO L87 Difference]: Start difference. First operand 18526 states and 34560 transitions. cyclomatic complexity: 16071 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:48,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:48,743 INFO L93 Difference]: Finished difference Result 25882 states and 48292 transitions. [2021-12-06 23:05:48,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:48,744 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25882 states and 48292 transitions. [2021-12-06 23:05:48,831 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 8000 [2021-12-06 23:05:48,902 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25882 states to 25882 states and 48292 transitions. [2021-12-06 23:05:48,903 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25803 [2021-12-06 23:05:48,918 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25803 [2021-12-06 23:05:48,918 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25882 states and 48292 transitions. [2021-12-06 23:05:48,919 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:48,919 INFO L681 BuchiCegarLoop]: Abstraction has 25882 states and 48292 transitions. [2021-12-06 23:05:48,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25882 states and 48292 transitions. [2021-12-06 23:05:49,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25882 to 18526. [2021-12-06 23:05:49,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18526 states, 18526 states have (on average 1.8651624743603583) internal successors, (34554), 18525 states have internal predecessors, (34554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:49,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18526 states to 18526 states and 34554 transitions. [2021-12-06 23:05:49,138 INFO L704 BuchiCegarLoop]: Abstraction has 18526 states and 34554 transitions. [2021-12-06 23:05:49,138 INFO L587 BuchiCegarLoop]: Abstraction has 18526 states and 34554 transitions. [2021-12-06 23:05:49,138 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-06 23:05:49,139 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18526 states and 34554 transitions. [2021-12-06 23:05:49,182 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:49,182 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:49,183 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:49,183 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:49,183 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:49,184 INFO L791 eck$LassoCheckResult]: Stem: 848922#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 845176#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 843921#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 843922#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 842257#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 842258#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 844180#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 848075#L1317 assume !(0 == getOrigin_~person#1); 847522#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 847523#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 852499#L964 assume !(0 == initPersonOnFloor_~floor#1); 853486#L991 assume !(1 == initPersonOnFloor_~floor#1); 845492#L1018 assume !(2 == initPersonOnFloor_~floor#1); 840023#L1045 assume 3 == initPersonOnFloor_~floor#1; 840024#L1046 assume !(0 == initPersonOnFloor_~person#1); 853731#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 837132#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 837133#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 837472#L768-2 assume { :end_inline_callOnFloor } true; 852119#L1108 assume { :end_inline_initPersonOnFloor } true; 838479#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 838480#L1317-1 assume !(0 == getOrigin_~person#1); 847912#L1321-1 assume !(1 == getOrigin_~person#1); 846311#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 846312#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 854587#L964-1 assume 0 == initPersonOnFloor_~floor#1; 847315#L965-2 assume !(0 == initPersonOnFloor_~person#1); 847316#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 836115#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 846677#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 843301#L768-5 assume { :end_inline_callOnFloor } true; 845936#L1108-1 assume { :end_inline_initPersonOnFloor } true; 844912#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 844913#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 845654#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 845655#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 838559#L3060 assume 0 != timeShift_~tmp~29#1; 838561#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 850585#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 850586#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 849033#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 842391#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 842393#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 846342#L3350-2 [2021-12-06 23:05:49,184 INFO L793 eck$LassoCheckResult]: Loop: 846342#L3350-2 assume !false; 854489#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 852703#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 852704#L3359-2 assume !false; 839675#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 839676#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 846342#L3350-2 [2021-12-06 23:05:49,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:49,184 INFO L85 PathProgramCache]: Analyzing trace with hash 1011904592, now seen corresponding path program 1 times [2021-12-06 23:05:49,184 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:49,184 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2033632062] [2021-12-06 23:05:49,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:49,185 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:49,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:49,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:49,216 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:49,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2033632062] [2021-12-06 23:05:49,216 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2033632062] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:49,216 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:49,216 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:05:49,216 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [757633024] [2021-12-06 23:05:49,216 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:49,217 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:49,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:49,217 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 2 times [2021-12-06 23:05:49,217 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:49,217 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [704640320] [2021-12-06 23:05:49,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:49,218 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:49,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:49,222 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:49,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:49,228 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:49,243 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:49,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:05:49,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:05:49,243 INFO L87 Difference]: Start difference. First operand 18526 states and 34554 transitions. cyclomatic complexity: 16065 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:49,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:49,992 INFO L93 Difference]: Finished difference Result 55377 states and 103323 transitions. [2021-12-06 23:05:49,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:49,993 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55377 states and 103323 transitions. [2021-12-06 23:05:50,183 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12546 [2021-12-06 23:05:50,333 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55377 states to 55377 states and 103323 transitions. [2021-12-06 23:05:50,333 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55140 [2021-12-06 23:05:50,367 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55140 [2021-12-06 23:05:50,367 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55377 states and 103323 transitions. [2021-12-06 23:05:50,367 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:50,367 INFO L681 BuchiCegarLoop]: Abstraction has 55377 states and 103323 transitions. [2021-12-06 23:05:50,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55377 states and 103323 transitions. [2021-12-06 23:05:50,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55377 to 18530. [2021-12-06 23:05:50,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18530 states, 18530 states have (on average 1.8649217485159202) internal successors, (34557), 18529 states have internal predecessors, (34557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:50,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18530 states to 18530 states and 34557 transitions. [2021-12-06 23:05:50,663 INFO L704 BuchiCegarLoop]: Abstraction has 18530 states and 34557 transitions. [2021-12-06 23:05:50,663 INFO L587 BuchiCegarLoop]: Abstraction has 18530 states and 34557 transitions. [2021-12-06 23:05:50,663 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-06 23:05:50,664 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18530 states and 34557 transitions. [2021-12-06 23:05:50,708 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:50,708 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:50,708 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:50,708 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:50,708 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:50,709 INFO L791 eck$LassoCheckResult]: Stem: 922836#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 919090#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 917835#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 917836#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 916168#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 916169#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 918094#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 921989#L1317 assume !(0 == getOrigin_~person#1); 921436#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 921437#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 926414#L964 assume !(0 == initPersonOnFloor_~floor#1); 927402#L991 assume !(1 == initPersonOnFloor_~floor#1); 919406#L1018 assume !(2 == initPersonOnFloor_~floor#1); 913935#L1045 assume 3 == initPersonOnFloor_~floor#1; 913936#L1046 assume !(0 == initPersonOnFloor_~person#1); 927647#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 911044#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 911045#L756 assume !(0 == callOnFloor_~floorID#1); 911383#L759 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 911384#L768-2 assume { :end_inline_callOnFloor } true; 926034#L1108 assume { :end_inline_initPersonOnFloor } true; 912391#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 912392#L1317-1 assume !(0 == getOrigin_~person#1); 921826#L1321-1 assume !(1 == getOrigin_~person#1); 920225#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 920226#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 928506#L964-1 assume 0 == initPersonOnFloor_~floor#1; 921229#L965-2 assume !(0 == initPersonOnFloor_~person#1); 921230#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 920590#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 920591#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 917214#L768-5 assume { :end_inline_callOnFloor } true; 919850#L1108-1 assume { :end_inline_initPersonOnFloor } true; 918826#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 918827#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 919568#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 919569#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 912471#L3060 assume 0 != timeShift_~tmp~29#1; 912473#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 924499#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 924500#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 922947#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 916302#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 916304#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 920256#L3350-2 [2021-12-06 23:05:50,709 INFO L793 eck$LassoCheckResult]: Loop: 920256#L3350-2 assume !false; 928407#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 926618#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 926619#L3359-2 assume !false; 913587#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 913588#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 920256#L3350-2 [2021-12-06 23:05:50,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:50,709 INFO L85 PathProgramCache]: Analyzing trace with hash -793620309, now seen corresponding path program 1 times [2021-12-06 23:05:50,709 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:50,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1049524744] [2021-12-06 23:05:50,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:50,709 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:50,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:50,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:50,739 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:50,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1049524744] [2021-12-06 23:05:50,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1049524744] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:50,739 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:50,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:05:50,740 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991464687] [2021-12-06 23:05:50,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:50,740 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:50,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:50,740 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 3 times [2021-12-06 23:05:50,740 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:50,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [477313799] [2021-12-06 23:05:50,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:50,741 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:50,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:50,745 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:50,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:50,749 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:50,762 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:50,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:05:50,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:05:50,762 INFO L87 Difference]: Start difference. First operand 18530 states and 34557 transitions. cyclomatic complexity: 16064 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:51,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:51,502 INFO L93 Difference]: Finished difference Result 55382 states and 103325 transitions. [2021-12-06 23:05:51,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:51,503 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55382 states and 103325 transitions. [2021-12-06 23:05:51,684 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12546 [2021-12-06 23:05:51,831 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55382 states to 55382 states and 103325 transitions. [2021-12-06 23:05:51,831 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55145 [2021-12-06 23:05:51,863 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55145 [2021-12-06 23:05:51,864 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55382 states and 103325 transitions. [2021-12-06 23:05:51,864 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:51,864 INFO L681 BuchiCegarLoop]: Abstraction has 55382 states and 103325 transitions. [2021-12-06 23:05:51,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55382 states and 103325 transitions. [2021-12-06 23:05:52,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55382 to 18536. [2021-12-06 23:05:52,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18536 states, 18536 states have (on average 1.8645878290893396) internal successors, (34562), 18535 states have internal predecessors, (34562), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:52,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18536 states to 18536 states and 34562 transitions. [2021-12-06 23:05:52,158 INFO L704 BuchiCegarLoop]: Abstraction has 18536 states and 34562 transitions. [2021-12-06 23:05:52,159 INFO L587 BuchiCegarLoop]: Abstraction has 18536 states and 34562 transitions. [2021-12-06 23:05:52,159 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-06 23:05:52,159 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18536 states and 34562 transitions. [2021-12-06 23:05:52,201 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:52,201 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:52,201 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:52,202 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:52,202 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:52,202 INFO L791 eck$LassoCheckResult]: Stem: 996760#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 993014#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 991758#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 991759#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 990091#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 990092#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 992017#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 995913#L1317 assume !(0 == getOrigin_~person#1); 995360#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 995361#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1000339#L964 assume !(0 == initPersonOnFloor_~floor#1); 1001327#L991 assume !(1 == initPersonOnFloor_~floor#1); 993330#L1018 assume !(2 == initPersonOnFloor_~floor#1); 987857#L1045 assume 3 == initPersonOnFloor_~floor#1; 987858#L1046 assume !(0 == initPersonOnFloor_~person#1); 1001571#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 984965#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 984966#L756 assume !(0 == callOnFloor_~floorID#1); 985304#L759 assume !(1 == callOnFloor_~floorID#1); 985305#L762 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 985463#L768-2 assume { :end_inline_callOnFloor } true; 999959#L1108 assume { :end_inline_initPersonOnFloor } true; 986312#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 986313#L1317-1 assume !(0 == getOrigin_~person#1); 995750#L1321-1 assume !(1 == getOrigin_~person#1); 994149#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 994150#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1002431#L964-1 assume 0 == initPersonOnFloor_~floor#1; 995153#L965-2 assume !(0 == initPersonOnFloor_~person#1); 995154#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 1000676#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1002438#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 991137#L768-5 assume { :end_inline_callOnFloor } true; 993774#L1108-1 assume { :end_inline_initPersonOnFloor } true; 992749#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 992750#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 993492#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 993493#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 986392#L3060 assume 0 != timeShift_~tmp~29#1; 986394#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 998423#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 998424#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 996871#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 990225#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 990227#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 994180#L3350-2 [2021-12-06 23:05:52,202 INFO L793 eck$LassoCheckResult]: Loop: 994180#L3350-2 assume !false; 1002332#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1000543#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1000544#L3359-2 assume !false; 987509#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 987510#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 994180#L3350-2 [2021-12-06 23:05:52,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:52,202 INFO L85 PathProgramCache]: Analyzing trace with hash -775218357, now seen corresponding path program 1 times [2021-12-06 23:05:52,203 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:52,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485004509] [2021-12-06 23:05:52,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:52,203 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:52,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:52,240 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:52,240 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:52,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485004509] [2021-12-06 23:05:52,241 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485004509] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:52,241 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:52,241 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:05:52,241 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548946515] [2021-12-06 23:05:52,241 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:52,242 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:52,242 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:52,242 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 4 times [2021-12-06 23:05:52,242 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:52,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1511003418] [2021-12-06 23:05:52,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:52,243 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:52,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:52,246 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:52,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:52,251 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:52,265 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:52,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:05:52,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:05:52,266 INFO L87 Difference]: Start difference. First operand 18536 states and 34562 transitions. cyclomatic complexity: 16063 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:52,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:52,935 INFO L93 Difference]: Finished difference Result 55389 states and 103329 transitions. [2021-12-06 23:05:52,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:52,936 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55389 states and 103329 transitions. [2021-12-06 23:05:53,207 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 12546 [2021-12-06 23:05:53,337 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55389 states to 55389 states and 103329 transitions. [2021-12-06 23:05:53,337 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55152 [2021-12-06 23:05:53,365 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55152 [2021-12-06 23:05:53,365 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55389 states and 103329 transitions. [2021-12-06 23:05:53,369 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:53,369 INFO L681 BuchiCegarLoop]: Abstraction has 55389 states and 103329 transitions. [2021-12-06 23:05:53,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55389 states and 103329 transitions. [2021-12-06 23:05:53,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55389 to 18544. [2021-12-06 23:05:53,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18544 states, 18544 states have (on average 1.8641609145815359) internal successors, (34569), 18543 states have internal predecessors, (34569), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:53,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18544 states to 18544 states and 34569 transitions. [2021-12-06 23:05:53,652 INFO L704 BuchiCegarLoop]: Abstraction has 18544 states and 34569 transitions. [2021-12-06 23:05:53,652 INFO L587 BuchiCegarLoop]: Abstraction has 18544 states and 34569 transitions. [2021-12-06 23:05:53,652 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-06 23:05:53,652 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18544 states and 34569 transitions. [2021-12-06 23:05:53,695 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:53,695 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:53,695 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:53,695 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:53,695 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:53,696 INFO L791 eck$LassoCheckResult]: Stem: 1070695#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1066949#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1065694#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1065695#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1064027#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1064028#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1065953#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1069849#L1317 assume !(0 == getOrigin_~person#1); 1069294#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1069295#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1074275#L964 assume !(0 == initPersonOnFloor_~floor#1); 1075262#L991 assume !(1 == initPersonOnFloor_~floor#1); 1067265#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1061792#L1045 assume 3 == initPersonOnFloor_~floor#1; 1061793#L1046 assume !(0 == initPersonOnFloor_~person#1); 1075507#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1058899#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1058900#L756 assume !(0 == callOnFloor_~floorID#1); 1059238#L759 assume !(1 == callOnFloor_~floorID#1); 1059239#L762 assume !(2 == callOnFloor_~floorID#1); 1059396#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1059397#L768-2 assume { :end_inline_callOnFloor } true; 1073893#L1108 assume { :end_inline_initPersonOnFloor } true; 1060249#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1060250#L1317-1 assume !(0 == getOrigin_~person#1); 1069685#L1321-1 assume !(1 == getOrigin_~person#1); 1068084#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1068085#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1076363#L964-1 assume 0 == initPersonOnFloor_~floor#1; 1069087#L965-2 assume !(0 == initPersonOnFloor_~person#1); 1069088#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 1074611#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1076374#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1065073#L768-5 assume { :end_inline_callOnFloor } true; 1067709#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1066685#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1066686#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1067427#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1067428#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1060326#L3060 assume 0 != timeShift_~tmp~29#1; 1060328#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1072359#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1072360#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1070809#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1064161#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1064163#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1068115#L3350-2 [2021-12-06 23:05:53,696 INFO L793 eck$LassoCheckResult]: Loop: 1068115#L3350-2 assume !false; 1076265#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1074478#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1074479#L3359-2 assume !false; 1061443#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1061444#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1068115#L3350-2 [2021-12-06 23:05:53,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:53,696 INFO L85 PathProgramCache]: Analyzing trace with hash -49658810, now seen corresponding path program 1 times [2021-12-06 23:05:53,696 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:53,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [885324554] [2021-12-06 23:05:53,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:53,696 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:53,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:53,729 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:53,729 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:53,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [885324554] [2021-12-06 23:05:53,730 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [885324554] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:53,730 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:53,730 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:05:53,730 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [776257433] [2021-12-06 23:05:53,730 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:53,730 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:53,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:53,730 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 5 times [2021-12-06 23:05:53,730 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:53,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1227125861] [2021-12-06 23:05:53,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:53,731 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:53,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:53,733 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:53,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:53,736 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:53,751 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:53,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:05:53,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:05:53,751 INFO L87 Difference]: Start difference. First operand 18544 states and 34569 transitions. cyclomatic complexity: 16062 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:54,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:54,380 INFO L93 Difference]: Finished difference Result 40668 states and 75878 transitions. [2021-12-06 23:05:54,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:05:54,380 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40668 states and 75878 transitions. [2021-12-06 23:05:54,515 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 15636 [2021-12-06 23:05:54,624 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40668 states to 40668 states and 75878 transitions. [2021-12-06 23:05:54,624 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40589 [2021-12-06 23:05:54,650 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40589 [2021-12-06 23:05:54,650 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40668 states and 75878 transitions. [2021-12-06 23:05:54,652 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:54,652 INFO L681 BuchiCegarLoop]: Abstraction has 40668 states and 75878 transitions. [2021-12-06 23:05:54,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40668 states and 75878 transitions. [2021-12-06 23:05:54,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40668 to 18530. [2021-12-06 23:05:54,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18530 states, 18530 states have (on average 1.8641662169454938) internal successors, (34543), 18529 states have internal predecessors, (34543), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:54,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18530 states to 18530 states and 34543 transitions. [2021-12-06 23:05:54,920 INFO L704 BuchiCegarLoop]: Abstraction has 18530 states and 34543 transitions. [2021-12-06 23:05:54,920 INFO L587 BuchiCegarLoop]: Abstraction has 18530 states and 34543 transitions. [2021-12-06 23:05:54,920 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-06 23:05:54,921 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18530 states and 34543 transitions. [2021-12-06 23:05:54,964 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:54,964 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:54,964 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:54,964 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:54,965 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:54,965 INFO L791 eck$LassoCheckResult]: Stem: 1129918#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1126178#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1124923#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1124924#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1123257#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1123258#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1125182#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1129072#L1317 assume !(0 == getOrigin_~person#1); 1128520#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1128521#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1133495#L964 assume !(0 == initPersonOnFloor_~floor#1); 1134480#L991 assume !(1 == initPersonOnFloor_~floor#1); 1126494#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1121021#L1045 assume 3 == initPersonOnFloor_~floor#1; 1121022#L1046 assume !(0 == initPersonOnFloor_~person#1); 1134724#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1118128#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1118129#L756 assume !(0 == callOnFloor_~floorID#1); 1118467#L759 assume !(1 == callOnFloor_~floorID#1); 1118468#L762 assume !(2 == callOnFloor_~floorID#1); 1118625#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1118626#L768-2 assume { :end_inline_callOnFloor } true; 1133115#L1108 assume { :end_inline_initPersonOnFloor } true; 1119476#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1119477#L1317-1 assume !(0 == getOrigin_~person#1); 1128910#L1321-1 assume !(1 == getOrigin_~person#1); 1127313#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1127314#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1119196#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1117722#L991-1 assume 1 == initPersonOnFloor_~floor#1; 1117723#L992-2 assume !(0 == initPersonOnFloor_~person#1); 1124054#L995-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 1117110#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1135587#L756-2 assume !(0 == callOnFloor_~floorID#1); 1135585#L759-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1124302#L768-5 assume { :end_inline_callOnFloor } true; 1126938#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1125914#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1125915#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1126656#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1126657#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1119555#L3060 assume 0 != timeShift_~tmp~29#1; 1119557#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1131581#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1131582#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1130031#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1123391#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1123393#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1127343#L3350-2 [2021-12-06 23:05:54,965 INFO L793 eck$LassoCheckResult]: Loop: 1127343#L3350-2 assume !false; 1135482#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1133699#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1133700#L3359-2 assume !false; 1120672#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1120673#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1127343#L3350-2 [2021-12-06 23:05:54,965 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:54,965 INFO L85 PathProgramCache]: Analyzing trace with hash 1777575836, now seen corresponding path program 1 times [2021-12-06 23:05:54,965 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:54,965 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494942363] [2021-12-06 23:05:54,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:54,965 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:54,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:54,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:54,994 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:54,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494942363] [2021-12-06 23:05:54,994 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494942363] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:54,994 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:54,994 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:05:54,994 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318625290] [2021-12-06 23:05:54,994 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:54,994 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:54,995 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:54,995 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 6 times [2021-12-06 23:05:54,995 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:54,995 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336047765] [2021-12-06 23:05:54,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:54,995 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:54,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:54,997 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:54,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:55,000 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:55,013 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:55,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:05:55,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:05:55,013 INFO L87 Difference]: Start difference. First operand 18530 states and 34543 transitions. cyclomatic complexity: 16050 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:55,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:55,842 INFO L93 Difference]: Finished difference Result 40642 states and 75829 transitions. [2021-12-06 23:05:55,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:05:55,843 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40642 states and 75829 transitions. [2021-12-06 23:05:56,006 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 15636 [2021-12-06 23:05:56,123 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40642 states to 40642 states and 75829 transitions. [2021-12-06 23:05:56,123 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40563 [2021-12-06 23:05:56,150 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40563 [2021-12-06 23:05:56,150 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40642 states and 75829 transitions. [2021-12-06 23:05:56,151 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:56,151 INFO L681 BuchiCegarLoop]: Abstraction has 40642 states and 75829 transitions. [2021-12-06 23:05:56,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40642 states and 75829 transitions. [2021-12-06 23:05:56,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40642 to 18524. [2021-12-06 23:05:56,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18524 states, 18524 states have (on average 1.8640682358022025) internal successors, (34530), 18523 states have internal predecessors, (34530), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:56,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18524 states to 18524 states and 34530 transitions. [2021-12-06 23:05:56,463 INFO L704 BuchiCegarLoop]: Abstraction has 18524 states and 34530 transitions. [2021-12-06 23:05:56,463 INFO L587 BuchiCegarLoop]: Abstraction has 18524 states and 34530 transitions. [2021-12-06 23:05:56,463 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-06 23:05:56,463 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18524 states and 34530 transitions. [2021-12-06 23:05:56,518 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:56,518 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:56,518 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:56,518 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:56,518 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:56,519 INFO L791 eck$LassoCheckResult]: Stem: 1189102#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1185361#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1184104#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1184105#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1182440#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1182441#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1184364#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1188255#L1317 assume !(0 == getOrigin_~person#1); 1187704#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1187705#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1192679#L964 assume !(0 == initPersonOnFloor_~floor#1); 1193664#L991 assume !(1 == initPersonOnFloor_~floor#1); 1185677#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1180205#L1045 assume 3 == initPersonOnFloor_~floor#1; 1180206#L1046 assume !(0 == initPersonOnFloor_~person#1); 1193908#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1177312#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1177313#L756 assume !(0 == callOnFloor_~floorID#1); 1177651#L759 assume !(1 == callOnFloor_~floorID#1); 1177652#L762 assume !(2 == callOnFloor_~floorID#1); 1177809#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1177810#L768-2 assume { :end_inline_callOnFloor } true; 1192299#L1108 assume { :end_inline_initPersonOnFloor } true; 1178659#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1178660#L1317-1 assume !(0 == getOrigin_~person#1); 1188094#L1321-1 assume !(1 == getOrigin_~person#1); 1186497#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1186498#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1178380#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1176907#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1176908#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 1187726#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 1180757#L1022-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 1180758#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1194772#L756-2 assume !(0 == callOnFloor_~floorID#1); 1194771#L759-2 assume !(1 == callOnFloor_~floorID#1); 1194765#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1183483#L768-5 assume { :end_inline_callOnFloor } true; 1186121#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1185096#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1185097#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1185839#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1185840#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1178739#L3060 assume 0 != timeShift_~tmp~29#1; 1178741#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1190764#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1190765#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1189213#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1182574#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1182576#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1186527#L3350-2 [2021-12-06 23:05:56,519 INFO L793 eck$LassoCheckResult]: Loop: 1186527#L3350-2 assume !false; 1194668#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1192883#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1192884#L3359-2 assume !false; 1179856#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1179857#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1186527#L3350-2 [2021-12-06 23:05:56,519 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:56,519 INFO L85 PathProgramCache]: Analyzing trace with hash 1937928637, now seen corresponding path program 1 times [2021-12-06 23:05:56,519 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:56,519 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179070232] [2021-12-06 23:05:56,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:56,519 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:56,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:56,553 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:56,554 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:56,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179070232] [2021-12-06 23:05:56,554 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179070232] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:56,554 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:56,554 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:05:56,554 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193906887] [2021-12-06 23:05:56,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:56,554 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:56,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:56,555 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 7 times [2021-12-06 23:05:56,555 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:56,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [367992481] [2021-12-06 23:05:56,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:56,555 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:56,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:56,558 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:56,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:56,561 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:56,574 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:56,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:05:56,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:05:56,574 INFO L87 Difference]: Start difference. First operand 18524 states and 34530 transitions. cyclomatic complexity: 16043 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:57,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:57,027 INFO L93 Difference]: Finished difference Result 25921 states and 48319 transitions. [2021-12-06 23:05:57,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:57,028 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25921 states and 48319 transitions. [2021-12-06 23:05:57,119 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 8000 [2021-12-06 23:05:57,193 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25921 states to 25921 states and 48319 transitions. [2021-12-06 23:05:57,193 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25842 [2021-12-06 23:05:57,210 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25842 [2021-12-06 23:05:57,210 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25921 states and 48319 transitions. [2021-12-06 23:05:57,210 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:57,210 INFO L681 BuchiCegarLoop]: Abstraction has 25921 states and 48319 transitions. [2021-12-06 23:05:57,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25921 states and 48319 transitions. [2021-12-06 23:05:57,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25921 to 18524. [2021-12-06 23:05:57,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18524 states, 18524 states have (on average 1.8636363636363635) internal successors, (34522), 18523 states have internal predecessors, (34522), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:57,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18524 states to 18524 states and 34522 transitions. [2021-12-06 23:05:57,436 INFO L704 BuchiCegarLoop]: Abstraction has 18524 states and 34522 transitions. [2021-12-06 23:05:57,436 INFO L587 BuchiCegarLoop]: Abstraction has 18524 states and 34522 transitions. [2021-12-06 23:05:57,436 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-06 23:05:57,436 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18524 states and 34522 transitions. [2021-12-06 23:05:57,480 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2021-12-06 23:05:57,480 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:57,480 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:57,480 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:57,480 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:57,480 INFO L791 eck$LassoCheckResult]: Stem: 1233553#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1229812#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1228557#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1228558#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1226893#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1226894#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1228816#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1232706#L1317 assume !(0 == getOrigin_~person#1); 1232155#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1232156#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1237133#L964 assume !(0 == initPersonOnFloor_~floor#1); 1238118#L991 assume !(1 == initPersonOnFloor_~floor#1); 1230128#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1224659#L1045 assume 3 == initPersonOnFloor_~floor#1; 1224660#L1046 assume !(0 == initPersonOnFloor_~person#1); 1238361#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1221766#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1221767#L756 assume !(0 == callOnFloor_~floorID#1); 1222105#L759 assume !(1 == callOnFloor_~floorID#1); 1222106#L762 assume !(2 == callOnFloor_~floorID#1); 1222263#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1222264#L768-2 assume { :end_inline_callOnFloor } true; 1236752#L1108 assume { :end_inline_initPersonOnFloor } true; 1223113#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1223114#L1317-1 assume !(0 == getOrigin_~person#1); 1232545#L1321-1 assume !(1 == getOrigin_~person#1); 1230947#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1230948#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1222834#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1221361#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1221362#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 1232177#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 1225211#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 1225212#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1234266#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1239232#L756-2 assume !(0 == callOnFloor_~floorID#1); 1239231#L759-2 assume !(1 == callOnFloor_~floorID#1); 1239230#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1227936#L768-5 assume { :end_inline_callOnFloor } true; 1230572#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1229548#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1229549#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1230290#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1230291#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1223193#L3060 assume 0 != timeShift_~tmp~29#1; 1223195#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 1235217#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1235218#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1233664#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1227028#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1227030#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1230977#L3350-2 [2021-12-06 23:05:57,480 INFO L793 eck$LassoCheckResult]: Loop: 1230977#L3350-2 assume !false; 1239117#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1237337#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1237338#L3359-2 assume !false; 1224310#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1224311#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1230977#L3350-2 [2021-12-06 23:05:57,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:57,481 INFO L85 PathProgramCache]: Analyzing trace with hash -1066971836, now seen corresponding path program 1 times [2021-12-06 23:05:57,481 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:57,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1221637099] [2021-12-06 23:05:57,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:57,481 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:57,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:57,519 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:57,520 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:57,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1221637099] [2021-12-06 23:05:57,520 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1221637099] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:57,520 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:57,520 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:05:57,520 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335053856] [2021-12-06 23:05:57,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:57,520 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:57,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:57,520 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 8 times [2021-12-06 23:05:57,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:57,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1130416306] [2021-12-06 23:05:57,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:57,521 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:57,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:57,523 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:57,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:57,526 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:57,541 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:57,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:05:57,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:05:57,541 INFO L87 Difference]: Start difference. First operand 18524 states and 34522 transitions. cyclomatic complexity: 16035 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:58,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:58,158 INFO L93 Difference]: Finished difference Result 34520 states and 64494 transitions. [2021-12-06 23:05:58,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:05:58,159 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34520 states and 64494 transitions. [2021-12-06 23:05:58,267 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7224 [2021-12-06 23:05:58,352 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34520 states to 34520 states and 64494 transitions. [2021-12-06 23:05:58,353 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34362 [2021-12-06 23:05:58,372 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34362 [2021-12-06 23:05:58,372 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34520 states and 64494 transitions. [2021-12-06 23:05:58,374 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:05:58,374 INFO L681 BuchiCegarLoop]: Abstraction has 34520 states and 64494 transitions. [2021-12-06 23:05:58,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34520 states and 64494 transitions. [2021-12-06 23:05:58,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34520 to 29508. [2021-12-06 23:05:58,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29508 states, 29508 states have (on average 1.8641046495865528) internal successors, (55006), 29507 states have internal predecessors, (55006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:58,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29508 states to 29508 states and 55006 transitions. [2021-12-06 23:05:58,708 INFO L704 BuchiCegarLoop]: Abstraction has 29508 states and 55006 transitions. [2021-12-06 23:05:58,708 INFO L587 BuchiCegarLoop]: Abstraction has 29508 states and 55006 transitions. [2021-12-06 23:05:58,708 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-06 23:05:58,708 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29508 states and 55006 transitions. [2021-12-06 23:05:58,781 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7224 [2021-12-06 23:05:58,781 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:05:58,781 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:05:58,782 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:58,782 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:05:58,782 INFO L791 eck$LassoCheckResult]: Stem: 1286730#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1282907#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1281635#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1281636#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1279955#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1279956#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1281898#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1285863#L1317 assume !(0 == getOrigin_~person#1); 1285299#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1285300#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1290430#L964 assume !(0 == initPersonOnFloor_~floor#1); 1291476#L991 assume !(1 == initPersonOnFloor_~floor#1); 1283230#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1277713#L1045 assume 3 == initPersonOnFloor_~floor#1; 1277714#L1046 assume !(0 == initPersonOnFloor_~person#1); 1291753#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1274816#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1274817#L756 assume !(0 == callOnFloor_~floorID#1); 1275155#L759 assume !(1 == callOnFloor_~floorID#1); 1275156#L762 assume !(2 == callOnFloor_~floorID#1); 1275314#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1275315#L768-2 assume { :end_inline_callOnFloor } true; 1290019#L1108 assume { :end_inline_initPersonOnFloor } true; 1276167#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1276168#L1317-1 assume !(0 == getOrigin_~person#1); 1285696#L1321-1 assume !(1 == getOrigin_~person#1); 1284069#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1284070#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1275885#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1274411#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1274412#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 1285321#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 1278266#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 1278267#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1287460#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1292771#L756-2 assume !(0 == callOnFloor_~floorID#1); 1292770#L759-2 assume !(1 == callOnFloor_~floorID#1); 1292769#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1281009#L768-5 assume { :end_inline_callOnFloor } true; 1283686#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1282640#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1282641#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1283393#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1283394#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1276244#L3060 assume !(0 != timeShift_~tmp~29#1);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1276245#L693-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1284662#L720-65 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1288747#L3440-3 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 1292629#L2777-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1284587#L2040-5 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 1284588#L2781-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 1286418#L2794-1 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 1288197#L2929-2 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1288199#L3020-3 assume !(1 == ~doorState~0); 1288215#L3020-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1282187#L693-68 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1276631#L720-68 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1276632#L3440-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1280088#L2632-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1280089#L2040-8 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 1288596#L2645-2 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 1274243#L3028-2 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 1274245#L2689-3 assume !(1 == ~currentHeading~0); 1291133#L2699-9 assume !(0 == ~currentFloorID~0); 1289159#L2699-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1285834#L2705-7 assume { :end_inline_continueInDirection } true; 1282043#L3037-5 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1288441#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1288442#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1286844#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1280092#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1280094#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1284099#L3350-2 [2021-12-06 23:05:58,782 INFO L793 eck$LassoCheckResult]: Loop: 1284099#L3350-2 assume !false; 1292626#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1290645#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1290646#L3359-2 assume !false; 1277363#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1277364#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1284099#L3350-2 [2021-12-06 23:05:58,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:58,783 INFO L85 PathProgramCache]: Analyzing trace with hash -953121625, now seen corresponding path program 1 times [2021-12-06 23:05:58,783 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:58,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406214414] [2021-12-06 23:05:58,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:58,783 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:58,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:58,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:05:58,829 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:58,830 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406214414] [2021-12-06 23:05:58,830 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406214414] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:58,830 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:58,830 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 23:05:58,830 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612953585] [2021-12-06 23:05:58,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:58,830 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:05:58,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:58,830 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 9 times [2021-12-06 23:05:58,830 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:58,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1930501690] [2021-12-06 23:05:58,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:58,831 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:58,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:58,833 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:05:58,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:05:58,836 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:05:58,848 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:58,848 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:05:58,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:05:58,849 INFO L87 Difference]: Start difference. First operand 29508 states and 55006 transitions. cyclomatic complexity: 25572 Second operand has 8 states, 8 states have (on average 9.0) internal successors, (72), 7 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:05:59,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:59,731 INFO L93 Difference]: Finished difference Result 49677 states and 91260 transitions. [2021-12-06 23:05:59,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:05:59,732 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49677 states and 91260 transitions. [2021-12-06 23:05:59,920 INFO L131 ngComponentsAnalysis]: Automaton has 332 accepting balls. 17830 [2021-12-06 23:06:00,062 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49677 states to 49677 states and 91260 transitions. [2021-12-06 23:06:00,062 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49440 [2021-12-06 23:06:00,095 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49440 [2021-12-06 23:06:00,096 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49677 states and 91260 transitions. [2021-12-06 23:06:00,130 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:00,130 INFO L681 BuchiCegarLoop]: Abstraction has 49677 states and 91260 transitions. [2021-12-06 23:06:00,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49677 states and 91260 transitions. [2021-12-06 23:06:00,455 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49677 to 28742. [2021-12-06 23:06:00,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28742 states, 28742 states have (on average 1.848653538375896) internal successors, (53134), 28741 states have internal predecessors, (53134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:00,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28742 states to 28742 states and 53134 transitions. [2021-12-06 23:06:00,540 INFO L704 BuchiCegarLoop]: Abstraction has 28742 states and 53134 transitions. [2021-12-06 23:06:00,540 INFO L587 BuchiCegarLoop]: Abstraction has 28742 states and 53134 transitions. [2021-12-06 23:06:00,540 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-06 23:06:00,540 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28742 states and 53134 transitions. [2021-12-06 23:06:00,608 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8602 [2021-12-06 23:06:00,608 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:00,608 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:00,609 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:00,609 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:00,609 INFO L791 eck$LassoCheckResult]: Stem: 1364952#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1361385#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1360201#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1360202#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1358611#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1358612#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1360434#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1364135#L1317 assume !(0 == getOrigin_~person#1); 1363613#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1363614#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1368544#L964 assume !(0 == initPersonOnFloor_~floor#1); 1369622#L991 assume !(1 == initPersonOnFloor_~floor#1); 1361683#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1356575#L1045 assume 3 == initPersonOnFloor_~floor#1; 1356576#L1046 assume !(0 == initPersonOnFloor_~person#1); 1369906#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1353951#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1353952#L756 assume !(0 == callOnFloor_~floorID#1); 1354248#L759 assume !(1 == callOnFloor_~floorID#1); 1354249#L762 assume !(2 == callOnFloor_~floorID#1); 1354391#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1354392#L768-2 assume { :end_inline_callOnFloor } true; 1368153#L1108 assume { :end_inline_initPersonOnFloor } true; 1355155#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1355156#L1317-1 assume !(0 == getOrigin_~person#1); 1363968#L1321-1 assume !(1 == getOrigin_~person#1); 1362453#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1362454#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1354899#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1353584#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1353585#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 1363635#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 1357064#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 1357065#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1365649#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1371365#L756-2 assume !(0 == callOnFloor_~floorID#1); 1371364#L759-2 assume !(1 == callOnFloor_~floorID#1); 1371181#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1359597#L768-5 assume { :end_inline_callOnFloor } true; 1362105#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1361138#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1361139#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1361837#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1361838#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1355226#L3060 assume 0 != timeShift_~tmp~29#1; 1355227#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1366102#L693 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1360243#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1356400#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 1356401#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1369870#L2040 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 1359598#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 1359599#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 1366936#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1362017#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 1362018#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1370470#L693-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1363673#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1367313#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1370135#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1369891#L2040-3 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 1363551#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 1361645#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 1361646#L2689 assume !(1 == ~currentHeading~0); 1362622#L2699 assume !(0 == ~currentFloorID~0); 1357081#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1368321#L2705-1 assume { :end_inline_continueInDirection } true; 1362179#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1371208#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1371201#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1371202#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1371207#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1371359#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1371355#L3350-2 [2021-12-06 23:06:00,609 INFO L793 eck$LassoCheckResult]: Loop: 1371355#L3350-2 assume !false; 1371354#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1371353#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1371352#L3359-2 assume !false; 1371350#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1371351#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1371355#L3350-2 [2021-12-06 23:06:00,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:00,610 INFO L85 PathProgramCache]: Analyzing trace with hash -1488758990, now seen corresponding path program 1 times [2021-12-06 23:06:00,610 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:00,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [752696689] [2021-12-06 23:06:00,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:00,610 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:00,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:00,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:00,640 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:00,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [752696689] [2021-12-06 23:06:00,640 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [752696689] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:00,640 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:00,640 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:06:00,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1299089450] [2021-12-06 23:06:00,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:00,641 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:00,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:00,641 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 10 times [2021-12-06 23:06:00,641 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:00,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564072894] [2021-12-06 23:06:00,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:00,641 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:00,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:00,644 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:00,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:00,647 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:00,660 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:00,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:06:00,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:06:00,661 INFO L87 Difference]: Start difference. First operand 28742 states and 53134 transitions. cyclomatic complexity: 24526 Second operand has 4 states, 4 states have (on average 18.25) internal successors, (73), 3 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:04,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:04,456 INFO L93 Difference]: Finished difference Result 49974 states and 90623 transitions. [2021-12-06 23:06:04,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:06:04,457 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49974 states and 90623 transitions. [2021-12-06 23:06:04,645 INFO L131 ngComponentsAnalysis]: Automaton has 242 accepting balls. 15252 [2021-12-06 23:06:04,788 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49974 states to 49974 states and 90623 transitions. [2021-12-06 23:06:04,788 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49500 [2021-12-06 23:06:04,821 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49500 [2021-12-06 23:06:04,821 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49974 states and 90623 transitions. [2021-12-06 23:06:04,822 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:04,822 INFO L681 BuchiCegarLoop]: Abstraction has 49974 states and 90623 transitions. [2021-12-06 23:06:04,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49974 states and 90623 transitions. [2021-12-06 23:06:05,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49974 to 28742. [2021-12-06 23:06:05,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28742 states, 28742 states have (on average 1.8049892143900912) internal successors, (51879), 28741 states have internal predecessors, (51879), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:05,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28742 states to 28742 states and 51879 transitions. [2021-12-06 23:06:05,252 INFO L704 BuchiCegarLoop]: Abstraction has 28742 states and 51879 transitions. [2021-12-06 23:06:05,252 INFO L587 BuchiCegarLoop]: Abstraction has 28742 states and 51879 transitions. [2021-12-06 23:06:05,252 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-06 23:06:05,252 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28742 states and 51879 transitions. [2021-12-06 23:06:05,340 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8602 [2021-12-06 23:06:05,340 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:05,340 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:05,341 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:05,341 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:05,342 INFO L791 eck$LassoCheckResult]: Stem: 1443813#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1440103#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1438915#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1438916#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1437318#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1437319#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1439146#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1442939#L1317 assume !(0 == getOrigin_~person#1); 1442389#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1442390#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1447725#L964 assume !(0 == initPersonOnFloor_~floor#1); 1448893#L991 assume !(1 == initPersonOnFloor_~floor#1); 1440412#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1435264#L1045 assume 3 == initPersonOnFloor_~floor#1; 1435265#L1046 assume !(0 == initPersonOnFloor_~person#1); 1449228#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1432657#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1432658#L756 assume !(0 == callOnFloor_~floorID#1); 1432952#L759 assume !(1 == callOnFloor_~floorID#1); 1432953#L762 assume !(2 == callOnFloor_~floorID#1); 1433092#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1433093#L768-2 assume { :end_inline_callOnFloor } true; 1447273#L1108 assume { :end_inline_initPersonOnFloor } true; 1433843#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1433844#L1317-1 assume !(0 == getOrigin_~person#1); 1442762#L1321-1 assume !(1 == getOrigin_~person#1); 1441190#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1441191#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1433589#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1432297#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1432298#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 1442412#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 1435761#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 1435762#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1444565#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1450927#L756-2 assume !(0 == callOnFloor_~floorID#1); 1450926#L759-2 assume !(1 == callOnFloor_~floorID#1); 1450924#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1438318#L768-5 assume { :end_inline_callOnFloor } true; 1440836#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1439862#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1439863#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1440564#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1440565#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1433917#L3060 assume 0 != timeShift_~tmp~29#1; 1433918#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1445046#L693 assume !(0 == isFloorCalling_~floorID#1); 1445047#L697 assume !(1 == isFloorCalling_~floorID#1); 1448211#L701 assume !(2 == isFloorCalling_~floorID#1); 1438952#L705 assume !(3 == isFloorCalling_~floorID#1); 1438953#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1447405#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1435088#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 1435089#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1449189#L2040 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 1438319#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 1438320#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 1445937#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1440753#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 1440754#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1449914#L693-3 assume !(0 == isFloorCalling_~floorID#1); 1442453#L697-3 assume !(1 == isFloorCalling_~floorID#1); 1442454#L701-3 assume !(2 == isFloorCalling_~floorID#1); 1442538#L705-3 assume !(3 == isFloorCalling_~floorID#1); 1442539#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1446346#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1446347#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1449489#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1449215#L2040-3 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 1442328#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 1440371#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 1440372#L2689 assume !(1 == ~currentHeading~0); 1441360#L2699 assume !(0 == ~currentFloorID~0); 1435776#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1447471#L2705-1 assume { :end_inline_continueInDirection } true; 1440913#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1450959#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1450952#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1450953#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1450958#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1451102#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1451103#L3350-2 [2021-12-06 23:06:05,342 INFO L793 eck$LassoCheckResult]: Loop: 1451103#L3350-2 assume !false; 1451100#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1451101#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1451111#L3359-2 assume !false; 1451109#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1451110#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1451103#L3350-2 [2021-12-06 23:06:05,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:05,342 INFO L85 PathProgramCache]: Analyzing trace with hash 2092609990, now seen corresponding path program 1 times [2021-12-06 23:06:05,342 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:05,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748890458] [2021-12-06 23:06:05,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:05,343 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:05,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:05,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:05,383 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:05,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748890458] [2021-12-06 23:06:05,383 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748890458] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:05,383 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:05,383 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:05,383 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [717804351] [2021-12-06 23:06:05,383 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:05,383 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:05,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:05,384 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 11 times [2021-12-06 23:06:05,384 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:05,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1315003433] [2021-12-06 23:06:05,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:05,384 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:05,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:05,387 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:05,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:05,390 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:05,404 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:05,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:06:05,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:06:05,404 INFO L87 Difference]: Start difference. First operand 28742 states and 51879 transitions. cyclomatic complexity: 23271 Second operand has 6 states, 6 states have (on average 13.5) internal successors, (81), 5 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:14,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:14,134 INFO L93 Difference]: Finished difference Result 178027 states and 323371 transitions. [2021-12-06 23:06:14,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 23:06:14,135 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 178027 states and 323371 transitions. [2021-12-06 23:06:14,748 INFO L131 ngComponentsAnalysis]: Automaton has 1048 accepting balls. 51406 [2021-12-06 23:06:15,235 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 178027 states to 178027 states and 323371 transitions. [2021-12-06 23:06:15,235 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 175973 [2021-12-06 23:06:15,353 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 175973 [2021-12-06 23:06:15,354 INFO L73 IsDeterministic]: Start isDeterministic. Operand 178027 states and 323371 transitions. [2021-12-06 23:06:15,390 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:15,390 INFO L681 BuchiCegarLoop]: Abstraction has 178027 states and 323371 transitions. [2021-12-06 23:06:15,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 178027 states and 323371 transitions. [2021-12-06 23:06:16,252 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 178027 to 56860. [2021-12-06 23:06:16,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56860 states, 56860 states have (on average 1.8056102708406612) internal successors, (102667), 56859 states have internal predecessors, (102667), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:16,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56860 states to 56860 states and 102667 transitions. [2021-12-06 23:06:16,412 INFO L704 BuchiCegarLoop]: Abstraction has 56860 states and 102667 transitions. [2021-12-06 23:06:16,412 INFO L587 BuchiCegarLoop]: Abstraction has 56860 states and 102667 transitions. [2021-12-06 23:06:16,412 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-06 23:06:16,412 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56860 states and 102667 transitions. [2021-12-06 23:06:16,554 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048 [2021-12-06 23:06:16,555 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:16,555 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:16,555 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:16,556 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:16,556 INFO L791 eck$LassoCheckResult]: Stem: 1650625#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1646916#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1645720#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1645721#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1644125#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1644126#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1645957#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1649756#L1317 assume !(0 == getOrigin_~person#1); 1649212#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1649213#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1654491#L964 assume !(0 == initPersonOnFloor_~floor#1); 1655638#L991 assume !(1 == initPersonOnFloor_~floor#1); 1647222#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1642071#L1045 assume 3 == initPersonOnFloor_~floor#1; 1642072#L1046 assume !(0 == initPersonOnFloor_~person#1); 1655971#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1639454#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1639455#L756 assume !(0 == callOnFloor_~floorID#1); 1639749#L759 assume !(1 == callOnFloor_~floorID#1); 1639750#L762 assume !(2 == callOnFloor_~floorID#1); 1639888#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1639889#L768-2 assume { :end_inline_callOnFloor } true; 1657669#L1108 assume { :end_inline_initPersonOnFloor } true; 1657668#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1657667#L1317-1 assume !(0 == getOrigin_~person#1); 1657666#L1321-1 assume !(1 == getOrigin_~person#1); 1657665#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1657664#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1657663#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1657662#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1657661#L1018-1 assume !(2 == initPersonOnFloor_~floor#1); 1657658#L1045-1 assume !(3 == initPersonOnFloor_~floor#1); 1657652#L1072-2 assume !(4 == initPersonOnFloor_~floor#1); 1657644#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1657639#L756-2 assume !(0 == callOnFloor_~floorID#1); 1657637#L759-2 assume !(1 == callOnFloor_~floorID#1); 1657635#L762-2 assume !(2 == callOnFloor_~floorID#1); 1657633#L765-2 assume !(3 == callOnFloor_~floorID#1); 1657631#L768-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1645119#L768-5 assume { :end_inline_callOnFloor } true; 1647649#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1646676#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1646677#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1647378#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1647379#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1640716#L3060 assume 0 != timeShift_~tmp~29#1; 1640717#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1651845#L693 assume !(0 == isFloorCalling_~floorID#1); 1651846#L697 assume !(1 == isFloorCalling_~floorID#1); 1654961#L701 assume !(2 == isFloorCalling_~floorID#1); 1657620#L705 assume !(3 == isFloorCalling_~floorID#1); 1657619#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1657618#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1657615#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 1657612#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1655931#L2040 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 1645120#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 1645121#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 1652725#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1647562#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 1647563#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1656631#L693-3 assume !(0 == isFloorCalling_~floorID#1); 1649273#L697-3 assume !(1 == isFloorCalling_~floorID#1); 1649274#L701-3 assume !(2 == isFloorCalling_~floorID#1); 1649360#L705-3 assume !(3 == isFloorCalling_~floorID#1); 1649361#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1653136#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1653137#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1656223#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1655959#L2040-3 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 1649152#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 1647183#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 1647184#L2689 assume !(1 == ~currentHeading~0); 1648178#L2699 assume !(0 == ~currentFloorID~0); 1642584#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1654239#L2705-1 assume { :end_inline_continueInDirection } true; 1647724#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1673260#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1673258#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1673259#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1673261#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1673320#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1673319#L3350-2 [2021-12-06 23:06:16,556 INFO L793 eck$LassoCheckResult]: Loop: 1673319#L3350-2 assume !false; 1673318#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1673315#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1673313#L3359-2 assume !false; 1673310#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1673311#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1673319#L3350-2 [2021-12-06 23:06:16,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:16,556 INFO L85 PathProgramCache]: Analyzing trace with hash -791097224, now seen corresponding path program 1 times [2021-12-06 23:06:16,556 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:16,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271212630] [2021-12-06 23:06:16,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:16,557 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:16,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:16,583 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:16,584 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:16,584 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271212630] [2021-12-06 23:06:16,584 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271212630] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:16,584 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:16,584 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:06:16,584 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24226964] [2021-12-06 23:06:16,584 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:16,584 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:16,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:16,584 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 12 times [2021-12-06 23:06:16,585 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:16,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567885837] [2021-12-06 23:06:16,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:16,585 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:16,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:16,587 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:16,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:16,590 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:16,601 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:16,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:06:16,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:06:16,602 INFO L87 Difference]: Start difference. First operand 56860 states and 102667 transitions. cyclomatic complexity: 46075 Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:17,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:17,235 INFO L93 Difference]: Finished difference Result 109928 states and 198593 transitions. [2021-12-06 23:06:17,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:06:17,236 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109928 states and 198593 transitions. [2021-12-06 23:06:17,657 INFO L131 ngComponentsAnalysis]: Automaton has 380 accepting balls. 45816 [2021-12-06 23:06:18,374 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109928 states to 109928 states and 198593 transitions. [2021-12-06 23:06:18,374 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109454 [2021-12-06 23:06:18,431 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109454 [2021-12-06 23:06:18,432 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109928 states and 198593 transitions. [2021-12-06 23:06:18,433 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:18,433 INFO L681 BuchiCegarLoop]: Abstraction has 109928 states and 198593 transitions. [2021-12-06 23:06:18,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109928 states and 198593 transitions. [2021-12-06 23:06:19,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109928 to 56856. [2021-12-06 23:06:19,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56856 states, 56856 states have (on average 1.8052800056282539) internal successors, (102641), 56855 states have internal predecessors, (102641), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:19,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56856 states to 56856 states and 102641 transitions. [2021-12-06 23:06:19,538 INFO L704 BuchiCegarLoop]: Abstraction has 56856 states and 102641 transitions. [2021-12-06 23:06:19,538 INFO L587 BuchiCegarLoop]: Abstraction has 56856 states and 102641 transitions. [2021-12-06 23:06:19,538 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-06 23:06:19,539 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56856 states and 102641 transitions. [2021-12-06 23:06:19,661 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048 [2021-12-06 23:06:19,661 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:19,661 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:19,662 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:19,662 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:19,662 INFO L791 eck$LassoCheckResult]: Stem: 1817307#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1813671#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1812490#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1812491#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1810901#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 1810902#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1812720#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1816462#L1317 assume !(0 == getOrigin_~person#1); 1815933#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1815934#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1821041#L964 assume !(0 == initPersonOnFloor_~floor#1); 1822141#L991 assume !(1 == initPersonOnFloor_~floor#1); 1813970#L1018 assume !(2 == initPersonOnFloor_~floor#1); 1808856#L1045 assume 3 == initPersonOnFloor_~floor#1; 1808857#L1046 assume !(0 == initPersonOnFloor_~person#1); 1822458#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1806249#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1806250#L756 assume !(0 == callOnFloor_~floorID#1); 1806544#L759 assume !(1 == callOnFloor_~floorID#1); 1806545#L762 assume !(2 == callOnFloor_~floorID#1); 1806683#L765 assume !(3 == callOnFloor_~floorID#1); 1806685#L768 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1816735#L768-2 assume { :end_inline_callOnFloor } true; 1824947#L1108 assume { :end_inline_initPersonOnFloor } true; 1824946#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 1824945#L1317-1 assume !(0 == getOrigin_~person#1); 1824944#L1321-1 assume !(1 == getOrigin_~person#1); 1824943#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 1824942#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1824941#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 1824936#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 1824935#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 1824930#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 1824928#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 1824924#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1824920#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1824918#L756-2 assume !(0 == callOnFloor_~floorID#1); 1824916#L759-2 assume !(1 == callOnFloor_~floorID#1); 1824390#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1811898#L768-5 assume { :end_inline_callOnFloor } true; 1824341#L1108-1 assume { :end_inline_initPersonOnFloor } true; 1824338#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1824336#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 1824333#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1824331#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 1824329#L3060 assume 0 != timeShift_~tmp~29#1; 1824326#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1824325#L693 assume !(0 == isFloorCalling_~floorID#1); 1824324#L697 assume !(1 == isFloorCalling_~floorID#1); 1824323#L701 assume !(2 == isFloorCalling_~floorID#1); 1824322#L705 assume !(3 == isFloorCalling_~floorID#1); 1824321#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1824320#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1824319#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 1824318#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1822412#L2040 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 1811900#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 1811901#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 1824292#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 1824291#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 1824290#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 1824288#L693-3 assume !(0 == isFloorCalling_~floorID#1); 1824286#L697-3 assume !(1 == isFloorCalling_~floorID#1); 1824068#L701-3 assume !(2 == isFloorCalling_~floorID#1); 1824066#L705-3 assume !(3 == isFloorCalling_~floorID#1); 1824064#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 1824062#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1824061#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1824057#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1824054#L2040-3 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 1824050#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 1824046#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 1824042#L2689 assume !(1 == ~currentHeading~0); 1824040#L2699 assume !(0 == ~currentFloorID~0); 1824035#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1824014#L2705-1 assume { :end_inline_continueInDirection } true; 1824013#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 1823929#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1823922#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1823923#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1823928#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 1824145#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1824144#L3350-2 [2021-12-06 23:06:19,663 INFO L793 eck$LassoCheckResult]: Loop: 1824144#L3350-2 assume !false; 1824142#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1824141#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1824140#L3359-2 assume !false; 1824138#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1824139#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1824144#L3350-2 [2021-12-06 23:06:19,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:19,663 INFO L85 PathProgramCache]: Analyzing trace with hash 1465801670, now seen corresponding path program 1 times [2021-12-06 23:06:19,663 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:19,663 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340835815] [2021-12-06 23:06:19,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:19,663 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:19,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:19,690 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:19,690 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:19,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340835815] [2021-12-06 23:06:19,690 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340835815] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:19,691 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:19,691 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:19,691 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1227431827] [2021-12-06 23:06:19,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:19,691 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:19,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:19,691 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 13 times [2021-12-06 23:06:19,691 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:19,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669325735] [2021-12-06 23:06:19,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:19,692 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:19,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:19,694 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:19,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:19,697 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:19,709 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:19,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:06:19,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:06:19,710 INFO L87 Difference]: Start difference. First operand 56856 states and 102641 transitions. cyclomatic complexity: 46053 Second operand has 5 states, 5 states have (on average 16.4) internal successors, (82), 5 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:20,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:20,810 INFO L93 Difference]: Finished difference Result 151399 states and 273487 transitions. [2021-12-06 23:06:20,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 23:06:20,812 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 151399 states and 273487 transitions. [2021-12-06 23:06:21,443 INFO L131 ngComponentsAnalysis]: Automaton has 536 accepting balls. 61532 [2021-12-06 23:06:21,788 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 151399 states to 151399 states and 273487 transitions. [2021-12-06 23:06:21,788 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 150688 [2021-12-06 23:06:21,861 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 150688 [2021-12-06 23:06:21,861 INFO L73 IsDeterministic]: Start isDeterministic. Operand 151399 states and 273487 transitions. [2021-12-06 23:06:21,862 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:21,862 INFO L681 BuchiCegarLoop]: Abstraction has 151399 states and 273487 transitions. [2021-12-06 23:06:21,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151399 states and 273487 transitions. [2021-12-06 23:06:22,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151399 to 56873. [2021-12-06 23:06:22,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56873 states, 56873 states have (on average 1.8048810507622246) internal successors, (102649), 56872 states have internal predecessors, (102649), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:22,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56873 states to 56873 states and 102649 transitions. [2021-12-06 23:06:22,899 INFO L704 BuchiCegarLoop]: Abstraction has 56873 states and 102649 transitions. [2021-12-06 23:06:22,899 INFO L587 BuchiCegarLoop]: Abstraction has 56873 states and 102649 transitions. [2021-12-06 23:06:22,899 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-12-06 23:06:22,899 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56873 states and 102649 transitions. [2021-12-06 23:06:23,017 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048 [2021-12-06 23:06:23,017 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:23,017 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:23,018 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:23,018 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:23,018 INFO L791 eck$LassoCheckResult]: Stem: 2025347#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2021829#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 2020683#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2020684#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2019125#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 2019126#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 2020904#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2024540#L1317 assume !(0 == getOrigin_~person#1); 2024018#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2024019#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2028827#L964 assume !(0 == initPersonOnFloor_~floor#1); 2029825#L991 assume !(1 == initPersonOnFloor_~floor#1); 2022121#L1018 assume !(2 == initPersonOnFloor_~floor#1); 2017110#L1045 assume 3 == initPersonOnFloor_~floor#1; 2017111#L1046 assume !(0 == initPersonOnFloor_~person#1); 2030082#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2014520#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2014521#L756 assume !(0 == callOnFloor_~floorID#1); 2014814#L759 assume !(1 == callOnFloor_~floorID#1); 2014815#L762 assume !(2 == callOnFloor_~floorID#1); 2014953#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2014954#L768-2 assume { :end_inline_callOnFloor } true; 2028433#L1108 assume { :end_inline_initPersonOnFloor } true; 2015702#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2015703#L1317-1 assume !(0 == getOrigin_~person#1); 2024373#L1321-1 assume !(1 == getOrigin_~person#1); 2022873#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2022874#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2015450#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 2014160#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 2014161#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 2024042#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 2017596#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 2017597#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2023221#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2023222#L756-2 assume !(0 == callOnFloor_~floorID#1); 2024051#L759-2 assume !(1 == callOnFloor_~floorID#1); 2022895#L762-2 assume !(2 == callOnFloor_~floorID#1); 2022896#L765-2 assume !(3 == callOnFloor_~floorID#1); 2020100#L768-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 2020101#L768-5 assume { :end_inline_callOnFloor } true; 2031751#L1108-1 assume { :end_inline_initPersonOnFloor } true; 2031750#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2031749#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 2031748#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2031747#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 2031746#L3060 assume 0 != timeShift_~tmp~29#1; 2031745#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2031744#L693 assume !(0 == isFloorCalling_~floorID#1); 2031738#L697 assume !(1 == isFloorCalling_~floorID#1); 2031737#L701 assume !(2 == isFloorCalling_~floorID#1); 2031736#L705 assume !(3 == isFloorCalling_~floorID#1); 2031735#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2031734#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2031733#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 2031732#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2030043#L2040 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 2020103#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 2020104#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 2031528#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2031483#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 2031479#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2031478#L693-3 assume !(0 == isFloorCalling_~floorID#1); 2031477#L697-3 assume !(1 == isFloorCalling_~floorID#1); 2031476#L701-3 assume !(2 == isFloorCalling_~floorID#1); 2031475#L705-3 assume !(3 == isFloorCalling_~floorID#1); 2031473#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2031470#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2031468#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2031466#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2031464#L2040-3 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 2031462#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 2031460#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2031458#L2689 assume !(1 == ~currentHeading~0); 2031457#L2699 assume !(0 == ~currentFloorID~0); 2031450#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2031266#L2705-1 assume { :end_inline_continueInDirection } true; 2031265#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2031181#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 2031174#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 2031175#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2031180#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 2031411#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2031412#L3350-2 [2021-12-06 23:06:23,018 INFO L793 eck$LassoCheckResult]: Loop: 2031412#L3350-2 assume !false; 2031409#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2031410#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2031418#L3359-2 assume !false; 2031417#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2031415#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2031412#L3350-2 [2021-12-06 23:06:23,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:23,019 INFO L85 PathProgramCache]: Analyzing trace with hash 458917825, now seen corresponding path program 1 times [2021-12-06 23:06:23,019 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:23,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350884569] [2021-12-06 23:06:23,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:23,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:23,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:23,046 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:23,046 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:23,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350884569] [2021-12-06 23:06:23,047 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350884569] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:23,047 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:23,047 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:23,047 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987177904] [2021-12-06 23:06:23,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:23,047 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:23,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:23,047 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 14 times [2021-12-06 23:06:23,047 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:23,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266283785] [2021-12-06 23:06:23,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:23,048 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:23,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:23,050 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:23,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:23,052 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:23,064 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:23,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:06:23,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:06:23,065 INFO L87 Difference]: Start difference. First operand 56873 states and 102649 transitions. cyclomatic complexity: 46044 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:23,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:23,605 INFO L93 Difference]: Finished difference Result 67763 states and 122420 transitions. [2021-12-06 23:06:23,605 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:06:23,606 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 67763 states and 122420 transitions. [2021-12-06 23:06:23,962 INFO L131 ngComponentsAnalysis]: Automaton has 224 accepting balls. 29944 [2021-12-06 23:06:24,109 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 67763 states to 67763 states and 122420 transitions. [2021-12-06 23:06:24,109 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 67526 [2021-12-06 23:06:24,145 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 67526 [2021-12-06 23:06:24,145 INFO L73 IsDeterministic]: Start isDeterministic. Operand 67763 states and 122420 transitions. [2021-12-06 23:06:24,163 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:24,163 INFO L681 BuchiCegarLoop]: Abstraction has 67763 states and 122420 transitions. [2021-12-06 23:06:24,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67763 states and 122420 transitions. [2021-12-06 23:06:24,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67763 to 41555. [2021-12-06 23:06:24,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41555 states, 41555 states have (on average 1.8056070268319095) internal successors, (75032), 41554 states have internal predecessors, (75032), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:24,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41555 states to 41555 states and 75032 transitions. [2021-12-06 23:06:24,669 INFO L704 BuchiCegarLoop]: Abstraction has 41555 states and 75032 transitions. [2021-12-06 23:06:24,669 INFO L587 BuchiCegarLoop]: Abstraction has 41555 states and 75032 transitions. [2021-12-06 23:06:24,669 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-12-06 23:06:24,669 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41555 states and 75032 transitions. [2021-12-06 23:06:24,768 INFO L131 ngComponentsAnalysis]: Automaton has 156 accepting balls. 15716 [2021-12-06 23:06:24,768 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:24,768 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:24,768 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:24,768 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:24,769 INFO L791 eck$LassoCheckResult]: Stem: 2149963#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2146459#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 2145308#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2145309#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2143758#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 2143759#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 2145528#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2149153#L1317 assume !(0 == getOrigin_~person#1); 2148631#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2148632#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2153501#L964 assume !(0 == initPersonOnFloor_~floor#1); 2154515#L991 assume !(1 == initPersonOnFloor_~floor#1); 2146751#L1018 assume !(2 == initPersonOnFloor_~floor#1); 2141747#L1045 assume 3 == initPersonOnFloor_~floor#1; 2141748#L1046 assume !(0 == initPersonOnFloor_~person#1); 2154785#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2139161#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2139162#L756 assume !(0 == callOnFloor_~floorID#1); 2139453#L759 assume !(1 == callOnFloor_~floorID#1); 2139454#L762 assume !(2 == callOnFloor_~floorID#1); 2139592#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2139593#L768-2 assume { :end_inline_callOnFloor } true; 2153098#L1108 assume { :end_inline_initPersonOnFloor } true; 2140344#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2140345#L1317-1 assume !(0 == getOrigin_~person#1); 2148989#L1321-1 assume !(1 == getOrigin_~person#1); 2147497#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2147498#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2140088#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 2138804#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 2138805#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 2148651#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 2142234#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 2142235#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2147843#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2147844#L756-2 assume !(0 == callOnFloor_~floorID#1); 2148659#L759-2 assume !(1 == callOnFloor_~floorID#1); 2147522#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2147523#L768-5 assume { :end_inline_callOnFloor } true; 2147157#L1108-1 assume { :end_inline_initPersonOnFloor } true; 2146218#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2146219#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 2146896#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2146897#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 2140413#L3060 assume 0 != timeShift_~tmp~29#1; 2140414#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2151091#L693 assume !(0 == isFloorCalling_~floorID#1); 2151092#L697 assume !(1 == isFloorCalling_~floorID#1); 2153917#L701 assume !(2 == isFloorCalling_~floorID#1); 2145347#L705 assume !(3 == isFloorCalling_~floorID#1); 2145348#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2153224#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2141572#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 2141573#L2777 assume !(0 != stopRequestedAtCurrentFloor_~tmp~26#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 2155031#L2751-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2149439#L2040-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2149440#L2057-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2150561#L2078-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 2150562#L2762-1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 2154807#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 2151903#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2147071#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 2147072#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2155299#L693-3 assume !(0 == isFloorCalling_~floorID#1); 2148691#L697-3 assume !(1 == isFloorCalling_~floorID#1); 2148692#L701-3 assume !(2 == isFloorCalling_~floorID#1); 2148776#L705-3 assume !(3 == isFloorCalling_~floorID#1); 2148777#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2152273#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2152274#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2154994#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2154774#L2040-3 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 2148570#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 2146716#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2146717#L2689 assume !(1 == ~currentHeading~0); 2147660#L2699 assume !(0 == ~currentFloorID~0); 2142249#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2153271#L2705-1 assume { :end_inline_continueInDirection } true; 2147229#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2155998#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 2155991#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 2155992#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2155997#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 2156144#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2156145#L3350-2 [2021-12-06 23:06:24,769 INFO L793 eck$LassoCheckResult]: Loop: 2156145#L3350-2 assume !false; 2156142#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2156143#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2156153#L3359-2 assume !false; 2156151#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2156152#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2156145#L3350-2 [2021-12-06 23:06:24,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:24,769 INFO L85 PathProgramCache]: Analyzing trace with hash -932339240, now seen corresponding path program 1 times [2021-12-06 23:06:24,769 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:24,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989604146] [2021-12-06 23:06:24,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:24,770 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:24,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:24,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:24,817 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:24,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989604146] [2021-12-06 23:06:24,817 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989604146] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:24,817 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:24,817 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:24,817 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926340137] [2021-12-06 23:06:24,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:24,817 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:24,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:24,818 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 15 times [2021-12-06 23:06:24,818 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:24,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1794454402] [2021-12-06 23:06:24,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:24,818 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:24,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:24,820 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:24,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:24,823 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:24,836 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:24,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:06:24,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:06:24,836 INFO L87 Difference]: Start difference. First operand 41555 states and 75032 transitions. cyclomatic complexity: 33645 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 5 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:29,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:29,657 INFO L93 Difference]: Finished difference Result 108244 states and 196517 transitions. [2021-12-06 23:06:29,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:06:29,658 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 108244 states and 196517 transitions. [2021-12-06 23:06:30,044 INFO L131 ngComponentsAnalysis]: Automaton has 603 accepting balls. 43736 [2021-12-06 23:06:30,433 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 108244 states to 108244 states and 196517 transitions. [2021-12-06 23:06:30,433 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 107770 [2021-12-06 23:06:30,484 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 107770 [2021-12-06 23:06:30,484 INFO L73 IsDeterministic]: Start isDeterministic. Operand 108244 states and 196517 transitions. [2021-12-06 23:06:30,485 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:30,486 INFO L681 BuchiCegarLoop]: Abstraction has 108244 states and 196517 transitions. [2021-12-06 23:06:30,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108244 states and 196517 transitions. [2021-12-06 23:06:31,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108244 to 41523. [2021-12-06 23:06:31,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41523 states, 41523 states have (on average 1.8054572164824314) internal successors, (74968), 41522 states have internal predecessors, (74968), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:31,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41523 states to 41523 states and 74968 transitions. [2021-12-06 23:06:31,135 INFO L704 BuchiCegarLoop]: Abstraction has 41523 states and 74968 transitions. [2021-12-06 23:06:31,135 INFO L587 BuchiCegarLoop]: Abstraction has 41523 states and 74968 transitions. [2021-12-06 23:06:31,135 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-12-06 23:06:31,135 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41523 states and 74968 transitions. [2021-12-06 23:06:31,235 INFO L131 ngComponentsAnalysis]: Automaton has 156 accepting balls. 15708 [2021-12-06 23:06:31,235 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:31,235 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:31,235 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:31,235 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:31,236 INFO L791 eck$LassoCheckResult]: Stem: 2300177#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2296463#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 2295245#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2295246#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2293649#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 2293650#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 2295493#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2299304#L1317 assume !(0 == getOrigin_~person#1); 2298755#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2298756#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2304131#L964 assume !(0 == initPersonOnFloor_~floor#1); 2305345#L991 assume !(1 == initPersonOnFloor_~floor#1); 2296769#L1018 assume !(2 == initPersonOnFloor_~floor#1); 2291588#L1045 assume 3 == initPersonOnFloor_~floor#1; 2291589#L1046 assume !(0 == initPersonOnFloor_~person#1); 2305717#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2288989#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2288990#L756 assume !(0 == callOnFloor_~floorID#1); 2289281#L759 assume !(1 == callOnFloor_~floorID#1); 2289282#L762 assume !(2 == callOnFloor_~floorID#1); 2289420#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2289421#L768-2 assume { :end_inline_callOnFloor } true; 2303650#L1108 assume { :end_inline_initPersonOnFloor } true; 2290168#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2290169#L1317-1 assume !(0 == getOrigin_~person#1); 2299130#L1321-1 assume !(1 == getOrigin_~person#1); 2297563#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2297564#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2289916#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 2288633#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 2288634#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 2298776#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 2292087#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 2292088#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2297923#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2297924#L756-2 assume !(0 == callOnFloor_~floorID#1); 2298783#L759-2 assume !(1 == callOnFloor_~floorID#1); 2297583#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2297584#L768-5 assume { :end_inline_callOnFloor } true; 2297196#L1108-1 assume { :end_inline_initPersonOnFloor } true; 2296222#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2296223#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 2296921#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2296922#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 2290240#L3060 assume 0 != timeShift_~tmp~29#1; 2290241#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2301410#L693 assume !(0 == isFloorCalling_~floorID#1); 2301411#L697 assume !(1 == isFloorCalling_~floorID#1); 2304627#L701 assume !(2 == isFloorCalling_~floorID#1); 2295286#L705 assume !(3 == isFloorCalling_~floorID#1); 2295287#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2303790#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2291413#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 2291414#L2777 assume !(0 != stopRequestedAtCurrentFloor_~tmp~26#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 2306050#L2751-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2299608#L2040-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2299609#L2057-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2300831#L2078-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 2300832#L2762-1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 2305743#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 2302300#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2297111#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 2297112#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2306445#L693-3 assume !(0 == isFloorCalling_~floorID#1); 2298814#L697-3 assume !(1 == isFloorCalling_~floorID#1); 2298815#L701-3 assume !(2 == isFloorCalling_~floorID#1); 2298900#L705-3 assume !(3 == isFloorCalling_~floorID#1); 2298901#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2302711#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2302712#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2305997#L2632 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret76#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret77#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 2300053#L2654 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 2288384#L2675 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1; 2294928#L2598 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2294929#L2244-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2299415#L2413-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 2290922#L2566-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 2296554#L2616 stopRequestedInDirection_#t~ret81#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret81#1;havoc stopRequestedInDirection_#t~ret81#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 2298695#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 2296728#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2296729#L2689 assume !(1 == ~currentHeading~0); 2297731#L2699 assume !(0 == ~currentFloorID~0); 2292102#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2303854#L2705-1 assume { :end_inline_continueInDirection } true; 2297276#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2307665#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 2307658#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 2307659#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2307664#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 2307810#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2307811#L3350-2 [2021-12-06 23:06:31,236 INFO L793 eck$LassoCheckResult]: Loop: 2307811#L3350-2 assume !false; 2307808#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2307809#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2307819#L3359-2 assume !false; 2307817#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2307818#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2307811#L3350-2 [2021-12-06 23:06:31,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:31,236 INFO L85 PathProgramCache]: Analyzing trace with hash 1561922118, now seen corresponding path program 1 times [2021-12-06 23:06:31,236 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:31,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042312991] [2021-12-06 23:06:31,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:31,237 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:31,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:31,263 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:31,263 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:31,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042312991] [2021-12-06 23:06:31,264 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042312991] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:31,264 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:31,264 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:06:31,264 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [398814199] [2021-12-06 23:06:31,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:31,264 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:31,265 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:31,265 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 16 times [2021-12-06 23:06:31,265 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:31,265 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1745716370] [2021-12-06 23:06:31,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:31,265 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:31,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:31,268 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:31,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:31,272 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:31,284 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:31,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:06:31,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:06:31,284 INFO L87 Difference]: Start difference. First operand 41523 states and 74968 transitions. cyclomatic complexity: 33613 Second operand has 3 states, 3 states have (on average 30.0) internal successors, (90), 2 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:31,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:31,972 INFO L93 Difference]: Finished difference Result 64180 states and 115560 transitions. [2021-12-06 23:06:31,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:06:31,973 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64180 states and 115560 transitions. [2021-12-06 23:06:32,348 INFO L131 ngComponentsAnalysis]: Automaton has 228 accepting balls. 24408 [2021-12-06 23:06:32,495 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64180 states to 64180 states and 115560 transitions. [2021-12-06 23:06:32,495 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63867 [2021-12-06 23:06:32,526 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63867 [2021-12-06 23:06:32,526 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64180 states and 115560 transitions. [2021-12-06 23:06:32,542 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:32,542 INFO L681 BuchiCegarLoop]: Abstraction has 64180 states and 115560 transitions. [2021-12-06 23:06:32,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64180 states and 115560 transitions. [2021-12-06 23:06:33,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64180 to 64177. [2021-12-06 23:06:33,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64177 states, 64177 states have (on average 1.800598345201552) internal successors, (115557), 64176 states have internal predecessors, (115557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:33,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64177 states to 64177 states and 115557 transitions. [2021-12-06 23:06:33,399 INFO L704 BuchiCegarLoop]: Abstraction has 64177 states and 115557 transitions. [2021-12-06 23:06:33,399 INFO L587 BuchiCegarLoop]: Abstraction has 64177 states and 115557 transitions. [2021-12-06 23:06:33,400 INFO L425 BuchiCegarLoop]: ======== Iteration 20============ [2021-12-06 23:06:33,400 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64177 states and 115557 transitions. [2021-12-06 23:06:33,590 INFO L131 ngComponentsAnalysis]: Automaton has 228 accepting balls. 24408 [2021-12-06 23:06:33,590 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:33,590 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:33,591 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:33,591 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:33,591 INFO L791 eck$LassoCheckResult]: Stem: 2405394#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2401945#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 2400813#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2400814#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2399287#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 2399288#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 2401034#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2404608#L1317 assume !(0 == getOrigin_~person#1); 2404105#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2404106#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2408785#L964 assume !(0 == initPersonOnFloor_~floor#1); 2409743#L991 assume !(1 == initPersonOnFloor_~floor#1); 2402239#L1018 assume !(2 == initPersonOnFloor_~floor#1); 2397279#L1045 assume 3 == initPersonOnFloor_~floor#1; 2397280#L1046 assume !(0 == initPersonOnFloor_~person#1); 2409987#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2394696#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2394697#L756 assume !(0 == callOnFloor_~floorID#1); 2394987#L759 assume !(1 == callOnFloor_~floorID#1); 2394988#L762 assume !(2 == callOnFloor_~floorID#1); 2395126#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2395127#L768-2 assume { :end_inline_callOnFloor } true; 2408411#L1108 assume { :end_inline_initPersonOnFloor } true; 2395875#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2395876#L1317-1 assume !(0 == getOrigin_~person#1); 2404447#L1321-1 assume !(1 == getOrigin_~person#1); 2402977#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2402978#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2395621#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 2394341#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 2394342#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 2404126#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 2397763#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 2397764#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2403321#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2403322#L756-2 assume !(0 == callOnFloor_~floorID#1); 2404132#L759-2 assume !(1 == callOnFloor_~floorID#1); 2402999#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2403000#L768-5 assume { :end_inline_callOnFloor } true; 2402641#L1108-1 assume { :end_inline_initPersonOnFloor } true; 2401712#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2401713#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 2402385#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2402386#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 2395944#L3060 assume 0 != timeShift_~tmp~29#1; 2395945#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2406468#L693 assume !(0 == isFloorCalling_~floorID#1); 2406469#L697 assume !(1 == isFloorCalling_~floorID#1); 2409193#L701 assume !(2 == isFloorCalling_~floorID#1); 2400850#L705 assume !(3 == isFloorCalling_~floorID#1); 2400851#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2408531#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2397104#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 2397105#L2777 assume !(0 != stopRequestedAtCurrentFloor_~tmp~26#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 2410220#L2751-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2404890#L2040-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2404891#L2057-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2405979#L2078-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 2405980#L2762-1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 2410009#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 2407260#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2402557#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 2402558#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2410462#L693-3 assume !(0 == isFloorCalling_~floorID#1); 2404159#L697-3 assume !(1 == isFloorCalling_~floorID#1); 2404160#L701-3 assume !(2 == isFloorCalling_~floorID#1); 2404241#L705-3 assume !(3 == isFloorCalling_~floorID#1); 2404242#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2407615#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2407616#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2410181#L2632 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret76#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret77#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 2405282#L2654 assume !(0 != ~floorButtons_0~0); 2405283#L2658 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 2394093#L2675 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1; 2400513#L2598 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2400514#L2244-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2404713#L2413-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 2396620#L2566-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 2402032#L2616 stopRequestedInDirection_#t~ret81#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret81#1;havoc stopRequestedInDirection_#t~ret81#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 2404042#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 2402200#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2402201#L2689 assume !(1 == ~currentHeading~0); 2403141#L2699 assume !(0 == ~currentFloorID~0); 2397778#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2408575#L2705-1 assume { :end_inline_continueInDirection } true; 2402713#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2411024#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 2411017#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 2411018#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2411023#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 2411171#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2411172#L3350-2 [2021-12-06 23:06:33,592 INFO L793 eck$LassoCheckResult]: Loop: 2411172#L3350-2 assume !false; 2411168#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2411167#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2411166#L3359-2 assume !false; 2411164#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2411165#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2411172#L3350-2 [2021-12-06 23:06:33,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:33,592 INFO L85 PathProgramCache]: Analyzing trace with hash 154605907, now seen corresponding path program 1 times [2021-12-06 23:06:33,592 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:33,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1202191254] [2021-12-06 23:06:33,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:33,592 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:33,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:33,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:33,622 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:33,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1202191254] [2021-12-06 23:06:33,622 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1202191254] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:33,622 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:33,623 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:06:33,623 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115679785] [2021-12-06 23:06:33,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:33,623 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:33,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:33,624 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 17 times [2021-12-06 23:06:33,624 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:33,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809053173] [2021-12-06 23:06:33,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:33,624 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:33,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:33,628 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:33,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:33,632 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:33,645 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:33,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:06:33,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:06:33,646 INFO L87 Difference]: Start difference. First operand 64177 states and 115557 transitions. cyclomatic complexity: 51624 Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 2 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:34,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:34,638 INFO L93 Difference]: Finished difference Result 109315 states and 196479 transitions. [2021-12-06 23:06:34,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:06:34,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109315 states and 196479 transitions. [2021-12-06 23:06:35,039 INFO L131 ngComponentsAnalysis]: Automaton has 372 accepting balls. 41777 [2021-12-06 23:06:35,346 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109315 states to 109305 states and 196465 transitions. [2021-12-06 23:06:35,347 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108854 [2021-12-06 23:06:35,416 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108854 [2021-12-06 23:06:35,416 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109305 states and 196465 transitions. [2021-12-06 23:06:35,417 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:35,417 INFO L681 BuchiCegarLoop]: Abstraction has 109305 states and 196465 transitions. [2021-12-06 23:06:35,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109305 states and 196465 transitions. [2021-12-06 23:06:36,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109305 to 109299. [2021-12-06 23:06:36,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109299 states, 109299 states have (on average 1.7974455393004511) internal successors, (196459), 109298 states have internal predecessors, (196459), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:36,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109299 states to 109299 states and 196459 transitions. [2021-12-06 23:06:36,821 INFO L704 BuchiCegarLoop]: Abstraction has 109299 states and 196459 transitions. [2021-12-06 23:06:36,821 INFO L587 BuchiCegarLoop]: Abstraction has 109299 states and 196459 transitions. [2021-12-06 23:06:36,821 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-12-06 23:06:36,821 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 109299 states and 196459 transitions. [2021-12-06 23:06:37,064 INFO L131 ngComponentsAnalysis]: Automaton has 372 accepting balls. 41777 [2021-12-06 23:06:37,064 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:37,064 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:37,065 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:37,065 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:37,065 INFO L791 eck$LassoCheckResult]: Stem: 2578960#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2575459#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 2574321#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2574322#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2572781#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 2572782#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 2574545#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2578149#L1317 assume !(0 == getOrigin_~person#1); 2577635#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2577636#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2582420#L964 assume !(0 == initPersonOnFloor_~floor#1); 2583405#L991 assume !(1 == initPersonOnFloor_~floor#1); 2575749#L1018 assume !(2 == initPersonOnFloor_~floor#1); 2570769#L1045 assume 3 == initPersonOnFloor_~floor#1; 2570770#L1046 assume !(0 == initPersonOnFloor_~person#1); 2583653#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2568192#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2568193#L756 assume !(0 == callOnFloor_~floorID#1); 2568484#L759 assume !(1 == callOnFloor_~floorID#1); 2568485#L762 assume !(2 == callOnFloor_~floorID#1); 2568624#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2568625#L768-2 assume { :end_inline_callOnFloor } true; 2582048#L1108 assume { :end_inline_initPersonOnFloor } true; 2569366#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2569367#L1317-1 assume !(0 == getOrigin_~person#1); 2577988#L1321-1 assume !(1 == getOrigin_~person#1); 2576503#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2576504#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2569117#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 2567837#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 2567838#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 2577657#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 2571254#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 2571255#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2576849#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2576850#L756-2 assume !(0 == callOnFloor_~floorID#1); 2577663#L759-2 assume !(1 == callOnFloor_~floorID#1); 2576521#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2576522#L768-5 assume { :end_inline_callOnFloor } true; 2576156#L1108-1 assume { :end_inline_initPersonOnFloor } true; 2575221#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2575222#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 2575898#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2575899#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 2569438#L3060 assume 0 != timeShift_~tmp~29#1; 2569439#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2580059#L693 assume !(0 == isFloorCalling_~floorID#1); 2580060#L697 assume !(1 == isFloorCalling_~floorID#1); 2582836#L701 assume !(2 == isFloorCalling_~floorID#1); 2574356#L705 assume !(3 == isFloorCalling_~floorID#1); 2574357#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2582165#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2570596#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 2570597#L2777 assume !(0 != stopRequestedAtCurrentFloor_~tmp~26#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 2583905#L2751-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2578438#L2040-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2578439#L2057-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2579554#L2078-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 2579555#L2762-1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 2583676#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 2580868#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2576074#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 2576075#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2584159#L693-3 assume !(0 == isFloorCalling_~floorID#1); 2577690#L697-3 assume !(1 == isFloorCalling_~floorID#1); 2577691#L701-3 assume !(2 == isFloorCalling_~floorID#1); 2577771#L705-3 assume !(3 == isFloorCalling_~floorID#1); 2577772#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2581249#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2581250#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2583864#L2632 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret76#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret77#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 2578842#L2654 assume !(0 != ~floorButtons_0~0); 2578843#L2658 assume !(0 != ~floorButtons_1~0); 2570696#L2662 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 2567590#L2675 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1; 2574022#L2598 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2574023#L2244-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2578260#L2413-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 2570110#L2566-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 2575548#L2616 stopRequestedInDirection_#t~ret81#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret81#1;havoc stopRequestedInDirection_#t~ret81#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 2577574#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 2575714#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2575715#L2689 assume !(1 == ~currentHeading~0); 2576668#L2699 assume !(0 == ~currentFloorID~0); 2571269#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2582216#L2705-1 assume { :end_inline_continueInDirection } true; 2576234#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2584759#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 2584752#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 2584753#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2584758#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 2584869#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2584870#L3350-2 [2021-12-06 23:06:37,065 INFO L793 eck$LassoCheckResult]: Loop: 2584870#L3350-2 assume !false; 2584867#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2584868#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2584898#L3359-2 assume !false; 2584897#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2584893#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2584870#L3350-2 [2021-12-06 23:06:37,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:37,066 INFO L85 PathProgramCache]: Analyzing trace with hash -449915733, now seen corresponding path program 1 times [2021-12-06 23:06:37,066 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:37,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101723374] [2021-12-06 23:06:37,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:37,066 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:37,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:37,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:37,093 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:37,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101723374] [2021-12-06 23:06:37,093 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101723374] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:37,093 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:37,093 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:06:37,094 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1121294581] [2021-12-06 23:06:37,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:37,094 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:37,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:37,094 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 18 times [2021-12-06 23:06:37,094 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:37,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453653159] [2021-12-06 23:06:37,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:37,094 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:37,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:37,096 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:37,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:37,099 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:37,108 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:37,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:06:37,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:06:37,109 INFO L87 Difference]: Start difference. First operand 109299 states and 196459 transitions. cyclomatic complexity: 87556 Second operand has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 2 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:38,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:38,355 INFO L93 Difference]: Finished difference Result 199173 states and 357365 transitions. [2021-12-06 23:06:38,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:06:38,356 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 199173 states and 357365 transitions. [2021-12-06 23:06:39,350 INFO L131 ngComponentsAnalysis]: Automaton has 660 accepting balls. 76405 [2021-12-06 23:06:40,051 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 199173 states to 199173 states and 357365 transitions. [2021-12-06 23:06:40,052 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 198454 [2021-12-06 23:06:40,156 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 198454 [2021-12-06 23:06:40,156 INFO L73 IsDeterministic]: Start isDeterministic. Operand 199173 states and 357365 transitions. [2021-12-06 23:06:40,157 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:40,157 INFO L681 BuchiCegarLoop]: Abstraction has 199173 states and 357365 transitions. [2021-12-06 23:06:40,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199173 states and 357365 transitions. [2021-12-06 23:06:41,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199173 to 199157. [2021-12-06 23:06:41,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199157 states, 199157 states have (on average 1.794308008254794) internal successors, (357349), 199156 states have internal predecessors, (357349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:42,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199157 states to 199157 states and 357349 transitions. [2021-12-06 23:06:42,228 INFO L704 BuchiCegarLoop]: Abstraction has 199157 states and 357349 transitions. [2021-12-06 23:06:42,228 INFO L587 BuchiCegarLoop]: Abstraction has 199157 states and 357349 transitions. [2021-12-06 23:06:42,228 INFO L425 BuchiCegarLoop]: ======== Iteration 22============ [2021-12-06 23:06:42,228 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 199157 states and 357349 transitions. [2021-12-06 23:06:42,847 INFO L131 ngComponentsAnalysis]: Automaton has 660 accepting balls. 76405 [2021-12-06 23:06:42,848 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:42,848 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:42,849 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:42,849 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:42,849 INFO L791 eck$LassoCheckResult]: Stem: 2887483#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2883962#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 2882819#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2882820#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2881269#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 2881270#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 2883042#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2886671#L1317 assume !(0 == getOrigin_~person#1); 2886156#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2886157#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2890998#L964 assume !(0 == initPersonOnFloor_~floor#1); 2892008#L991 assume !(1 == initPersonOnFloor_~floor#1); 2884257#L1018 assume !(2 == initPersonOnFloor_~floor#1); 2879247#L1045 assume 3 == initPersonOnFloor_~floor#1; 2879248#L1046 assume !(0 == initPersonOnFloor_~person#1); 2892277#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2876669#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2876670#L756 assume !(0 == callOnFloor_~floorID#1); 2876962#L759 assume !(1 == callOnFloor_~floorID#1); 2876963#L762 assume !(2 == callOnFloor_~floorID#1); 2877100#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2877101#L768-2 assume { :end_inline_callOnFloor } true; 2890602#L1108 assume { :end_inline_initPersonOnFloor } true; 2877839#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 2877840#L1317-1 assume !(0 == getOrigin_~person#1); 2886510#L1321-1 assume !(1 == getOrigin_~person#1); 2885020#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2885021#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2877592#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 2876314#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 2876315#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 2886177#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 2879736#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 2879737#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2885362#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2885363#L756-2 assume !(0 == callOnFloor_~floorID#1); 2886187#L759-2 assume !(1 == callOnFloor_~floorID#1); 2885038#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2885039#L768-5 assume { :end_inline_callOnFloor } true; 2884673#L1108-1 assume { :end_inline_initPersonOnFloor } true; 2883724#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 2883725#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 2884412#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2884413#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 2877911#L3060 assume 0 != timeShift_~tmp~29#1; 2877912#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2888597#L693 assume !(0 == isFloorCalling_~floorID#1); 2888598#L697 assume !(1 == isFloorCalling_~floorID#1); 2891422#L701 assume !(2 == isFloorCalling_~floorID#1); 2882853#L705 assume !(3 == isFloorCalling_~floorID#1); 2882854#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2890726#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2879071#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 2879072#L2777 assume !(0 != stopRequestedAtCurrentFloor_~tmp~26#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 2892534#L2751-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2886966#L2040-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2886967#L2057-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2888092#L2078-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 2888093#L2762-1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 2892298#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 2889414#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 2884590#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 2884591#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 2892804#L693-3 assume !(0 == isFloorCalling_~floorID#1); 2886215#L697-3 assume !(1 == isFloorCalling_~floorID#1); 2886216#L701-3 assume !(2 == isFloorCalling_~floorID#1); 2886296#L705-3 assume !(3 == isFloorCalling_~floorID#1); 2886297#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 2889794#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2889795#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2892489#L2632 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret76#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret77#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 2887366#L2654 assume !(0 != ~floorButtons_0~0); 2887367#L2658 assume !(0 != ~floorButtons_1~0); 2879173#L2662 assume !(0 != ~floorButtons_2~0); 2876067#L2666 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 2876068#L2675 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1; 2882511#L2598 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2882512#L2244-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2886782#L2413-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 2878581#L2566-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 2884050#L2616 stopRequestedInDirection_#t~ret81#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret81#1;havoc stopRequestedInDirection_#t~ret81#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 2886095#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 2884219#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 2884220#L2689 assume !(1 == ~currentHeading~0); 2885180#L2699 assume !(0 == ~currentFloorID~0); 2879752#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2890781#L2705-1 assume { :end_inline_continueInDirection } true; 2884750#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 2893451#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 2893444#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 2893445#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2893450#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 2893531#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2893532#L3350-2 [2021-12-06 23:06:42,849 INFO L793 eck$LassoCheckResult]: Loop: 2893532#L3350-2 assume !false; 2893529#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2893530#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2893567#L3359-2 assume !false; 2893562#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2893556#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2893532#L3350-2 [2021-12-06 23:06:42,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:42,849 INFO L85 PathProgramCache]: Analyzing trace with hash -1937609448, now seen corresponding path program 1 times [2021-12-06 23:06:42,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:42,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2001896441] [2021-12-06 23:06:42,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:42,850 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:42,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:42,882 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:42,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2001896441] [2021-12-06 23:06:42,882 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2001896441] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:42,882 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:42,882 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:06:42,882 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904690242] [2021-12-06 23:06:42,882 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:42,883 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:42,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:42,883 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 19 times [2021-12-06 23:06:42,883 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:42,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [857537463] [2021-12-06 23:06:42,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:42,883 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:42,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:42,886 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:42,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:42,888 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:42,900 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:42,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:06:42,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:06:42,900 INFO L87 Difference]: Start difference. First operand 199157 states and 357349 transitions. cyclomatic complexity: 158892 Second operand has 3 states, 3 states have (on average 31.0) internal successors, (93), 2 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:45,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:45,074 INFO L93 Difference]: Finished difference Result 378063 states and 676931 transitions. [2021-12-06 23:06:45,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:06:45,075 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 378063 states and 676931 transitions. [2021-12-06 23:06:46,592 INFO L131 ngComponentsAnalysis]: Automaton has 1236 accepting balls. 145413 [2021-12-06 23:06:47,715 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 378063 states to 378063 states and 676931 transitions. [2021-12-06 23:06:47,715 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 376828 [2021-12-06 23:06:47,943 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 376828 [2021-12-06 23:06:47,944 INFO L73 IsDeterministic]: Start isDeterministic. Operand 378063 states and 676931 transitions. [2021-12-06 23:06:48,217 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:06:48,217 INFO L681 BuchiCegarLoop]: Abstraction has 378063 states and 676931 transitions. [2021-12-06 23:06:48,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378063 states and 676931 transitions. [2021-12-06 23:06:50,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378063 to 378031. [2021-12-06 23:06:50,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 378031 states, 378031 states have (on average 1.7905912478077195) internal successors, (676899), 378030 states have internal predecessors, (676899), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:06:52,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378031 states to 378031 states and 676899 transitions. [2021-12-06 23:06:52,150 INFO L704 BuchiCegarLoop]: Abstraction has 378031 states and 676899 transitions. [2021-12-06 23:06:52,150 INFO L587 BuchiCegarLoop]: Abstraction has 378031 states and 676899 transitions. [2021-12-06 23:06:52,150 INFO L425 BuchiCegarLoop]: ======== Iteration 23============ [2021-12-06 23:06:52,150 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 378031 states and 676899 transitions. [2021-12-06 23:06:53,303 INFO L131 ngComponentsAnalysis]: Automaton has 1236 accepting balls. 145413 [2021-12-06 23:06:53,303 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-06 23:06:53,303 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-06 23:06:53,304 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:53,304 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-06 23:06:53,304 INFO L791 eck$LassoCheckResult]: Stem: 3464816#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 3461236#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 3460076#L1414 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3460077#L1407 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 3458501#L1422 main_#t~ret30#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 3458502#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 3460300#L564 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 3463987#L1317 assume !(0 == getOrigin_~person#1); 3463467#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 3463468#L1342 aliceCall_#t~ret19#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3468448#L964 assume !(0 == initPersonOnFloor_~floor#1); 3469498#L991 assume !(1 == initPersonOnFloor_~floor#1); 3461540#L1018 assume !(2 == initPersonOnFloor_~floor#1); 3456470#L1045 assume 3 == initPersonOnFloor_~floor#1; 3456471#L1046 assume !(0 == initPersonOnFloor_~person#1); 3469772#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 3453892#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3453893#L756 assume !(0 == callOnFloor_~floorID#1); 3454182#L759 assume !(1 == callOnFloor_~floorID#1); 3454183#L762 assume !(2 == callOnFloor_~floorID#1); 3454320#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 3454321#L768-2 assume { :end_inline_callOnFloor } true; 3468038#L1108 assume { :end_inline_initPersonOnFloor } true; 3455067#L324 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 3455068#L1317-1 assume !(0 == getOrigin_~person#1); 3463820#L1321-1 assume !(1 == getOrigin_~person#1); 3462308#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 3462309#L1342-1 angelinaCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3454816#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 3453537#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 3453538#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 3463489#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 3456960#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 3456961#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 3462663#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3462664#L756-2 assume !(0 == callOnFloor_~floorID#1); 3463495#L759-2 assume !(1 == callOnFloor_~floorID#1); 3462334#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 3462335#L768-5 assume { :end_inline_callOnFloor } true; 3461962#L1108-1 assume { :end_inline_initPersonOnFloor } true; 3460997#L335 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 3460998#L2092 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 3461694#L170 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3461695#L2049 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 3455135#L3060 assume 0 != timeShift_~tmp~29#1; 3455136#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 3465961#L693 assume !(0 == isFloorCalling_~floorID#1); 3465962#L697 assume !(1 == isFloorCalling_~floorID#1); 3468891#L701 assume !(2 == isFloorCalling_~floorID#1); 3460115#L705 assume !(3 == isFloorCalling_~floorID#1); 3460116#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 3468160#L720 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 3456294#L3440 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 3456295#L2777 assume !(0 != stopRequestedAtCurrentFloor_~tmp~26#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret87#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 3470048#L2751-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3464287#L2040-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret85#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~25#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3464288#L2057-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 3465433#L2078-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret86#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 3465434#L2762-1 stopRequestedAtCurrentFloor_#t~ret91#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret91#1;havoc stopRequestedAtCurrentFloor_#t~ret91#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 3469796#L2794 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 3466803#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 3461876#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 3461877#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 3470356#L693-3 assume !(0 == isFloorCalling_~floorID#1); 3463522#L697-3 assume !(1 == isFloorCalling_~floorID#1); 3463523#L701-3 assume !(2 == isFloorCalling_~floorID#1); 3463604#L705-3 assume !(3 == isFloorCalling_~floorID#1); 3463605#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 3467189#L720-3 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 3467190#L3440-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 3470002#L2632 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret76#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret77#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 3464694#L2654 assume !(0 != ~floorButtons_0~0); 3464695#L2658 assume !(0 != ~floorButtons_1~0); 3456398#L2662 assume !(0 != ~floorButtons_2~0); 3453291#L2666 assume !(0 != ~floorButtons_3~0); 3453292#L2670 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~24#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 3460604#L2675 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret75#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~21#1; 3459767#L2598 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_#t~ret74#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 3459768#L2244-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 3464095#L2413-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 3455808#L2566-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret78#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 3461325#L2616 stopRequestedInDirection_#t~ret81#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret81#1;havoc stopRequestedInDirection_#t~ret81#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 3463405#L2645 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 3461499#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 3461500#L2689 assume !(1 == ~currentHeading~0); 3462479#L2699 assume !(0 == ~currentFloorID~0); 3456975#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3468211#L2705-1 assume { :end_inline_continueInDirection } true; 3462037#L3037-2 assume { :end_inline_timeShift__wrappee__executivefloor } true; 3471140#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 3471133#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 3471134#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 3471139#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 3471189#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 3471190#L3350-2 [2021-12-06 23:06:53,304 INFO L793 eck$LassoCheckResult]: Loop: 3471190#L3350-2 assume !false; 3471187#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 3471188#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 3471267#L3359-2 assume !false; 3471262#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 3471254#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 3471190#L3350-2 [2021-12-06 23:06:53,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:53,305 INFO L85 PathProgramCache]: Analyzing trace with hash 1867157138, now seen corresponding path program 1 times [2021-12-06 23:06:53,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:53,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525827558] [2021-12-06 23:06:53,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:53,305 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:53,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:53,341 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:06:53,341 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:53,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525827558] [2021-12-06 23:06:53,341 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525827558] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:53,341 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:53,341 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:53,341 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307328453] [2021-12-06 23:06:53,341 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:53,341 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-06 23:06:53,341 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:53,342 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 20 times [2021-12-06 23:06:53,342 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:53,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [297419997] [2021-12-06 23:06:53,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:53,342 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:53,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:53,344 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:06:53,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:06:53,346 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:06:53,358 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:53,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:06:53,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:06:53,358 INFO L87 Difference]: Start difference. First operand 378031 states and 676899 transitions. cyclomatic complexity: 300176 Second operand has 6 states, 6 states have (on average 15.666666666666666) internal successors, (94), 5 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:07:02,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:07:02,282 INFO L93 Difference]: Finished difference Result 1948963 states and 3500294 transitions. [2021-12-06 23:07:02,283 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 23:07:02,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1948963 states and 3500294 transitions. [2021-12-06 23:07:11,401 INFO L131 ngComponentsAnalysis]: Automaton has 7544 accepting balls. 987389 [2021-12-06 23:07:17,681 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1948963 states to 1948963 states and 3500294 transitions. [2021-12-06 23:07:17,681 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1947365 [2021-12-06 23:07:18,757 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1947365 [2021-12-06 23:07:18,757 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1948963 states and 3500294 transitions. [2021-12-06 23:07:19,544 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-06 23:07:19,545 INFO L681 BuchiCegarLoop]: Abstraction has 1948963 states and 3500294 transitions. [2021-12-06 23:07:20,729 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1948963 states and 3500294 transitions.