./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2e77838346608929bef5ad1e655ea0710d74ebb9f10b29169ab985d305812d92 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-19 18:42:23,024 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-19 18:42:23,025 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-19 18:42:23,053 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-19 18:42:23,053 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-19 18:42:23,056 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-19 18:42:23,057 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-19 18:42:23,061 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-19 18:42:23,062 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-19 18:42:23,065 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-19 18:42:23,066 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-19 18:42:23,067 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-19 18:42:23,067 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-19 18:42:23,069 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-19 18:42:23,070 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-19 18:42:23,073 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-19 18:42:23,074 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-19 18:42:23,074 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-19 18:42:23,076 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-19 18:42:23,080 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-19 18:42:23,081 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-19 18:42:23,081 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-19 18:42:23,083 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-19 18:42:23,083 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-19 18:42:23,087 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-19 18:42:23,088 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-19 18:42:23,088 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-19 18:42:23,089 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-19 18:42:23,089 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-19 18:42:23,090 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-19 18:42:23,090 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-19 18:42:23,091 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-19 18:42:23,092 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-19 18:42:23,093 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-19 18:42:23,094 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-19 18:42:23,094 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-19 18:42:23,095 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-19 18:42:23,095 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-19 18:42:23,095 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-19 18:42:23,096 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-19 18:42:23,096 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-19 18:42:23,097 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-19 18:42:23,117 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-19 18:42:23,117 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-19 18:42:23,118 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-19 18:42:23,118 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-19 18:42:23,119 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-19 18:42:23,119 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-19 18:42:23,119 INFO L138 SettingsManager]: * Use SBE=true [2021-12-19 18:42:23,119 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-19 18:42:23,119 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-19 18:42:23,119 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-19 18:42:23,119 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-19 18:42:23,120 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-19 18:42:23,120 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-19 18:42:23,120 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-19 18:42:23,120 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-19 18:42:23,120 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-19 18:42:23,120 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-19 18:42:23,120 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-19 18:42:23,121 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-19 18:42:23,122 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-19 18:42:23,122 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-19 18:42:23,122 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-19 18:42:23,122 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-19 18:42:23,122 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-19 18:42:23,122 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-19 18:42:23,122 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-19 18:42:23,123 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-19 18:42:23,123 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2e77838346608929bef5ad1e655ea0710d74ebb9f10b29169ab985d305812d92 [2021-12-19 18:42:23,304 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-19 18:42:23,318 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-19 18:42:23,320 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-19 18:42:23,321 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-19 18:42:23,321 INFO L275 PluginConnector]: CDTParser initialized [2021-12-19 18:42:23,322 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c [2021-12-19 18:42:23,380 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1c5bbcca6/3453e71218184024b74a715e48d97cd9/FLAGfcbc6e1e0 [2021-12-19 18:42:23,765 INFO L306 CDTParser]: Found 1 translation units. [2021-12-19 18:42:23,765 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c [2021-12-19 18:42:23,806 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1c5bbcca6/3453e71218184024b74a715e48d97cd9/FLAGfcbc6e1e0 [2021-12-19 18:42:24,117 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1c5bbcca6/3453e71218184024b74a715e48d97cd9 [2021-12-19 18:42:24,119 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-19 18:42:24,120 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-19 18:42:24,121 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-19 18:42:24,121 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-19 18:42:24,123 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-19 18:42:24,124 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:24,125 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1bae42a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24, skipping insertion in model container [2021-12-19 18:42:24,125 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:24,129 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-19 18:42:24,166 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-19 18:42:24,300 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c[1546,1559] [2021-12-19 18:42:24,519 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-19 18:42:24,530 INFO L203 MainTranslator]: Completed pre-run [2021-12-19 18:42:24,538 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c[1546,1559] [2021-12-19 18:42:24,622 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-19 18:42:24,651 INFO L208 MainTranslator]: Completed translation [2021-12-19 18:42:24,651 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24 WrapperNode [2021-12-19 18:42:24,651 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-19 18:42:24,652 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-19 18:42:24,652 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-19 18:42:24,652 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-19 18:42:24,659 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:24,677 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:24,993 INFO L137 Inliner]: procedures = 95, calls = 348, calls flagged for inlining = 201, calls inlined = 1065, statements flattened = 36562 [2021-12-19 18:42:24,993 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-19 18:42:24,994 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-19 18:42:24,994 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-19 18:42:24,994 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-19 18:42:25,000 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,000 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,128 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,129 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,253 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,485 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,522 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,586 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-19 18:42:25,644 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-19 18:42:25,644 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-19 18:42:25,644 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-19 18:42:25,645 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (1/1) ... [2021-12-19 18:42:25,650 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:25,656 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:25,685 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:25,724 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-19 18:42:25,750 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-19 18:42:25,750 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-19 18:42:25,751 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-19 18:42:25,751 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-19 18:42:25,926 INFO L236 CfgBuilder]: Building ICFG [2021-12-19 18:42:25,928 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-19 18:42:34,257 INFO L277 CfgBuilder]: Performing block encoding [2021-12-19 18:42:34,292 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-19 18:42:34,293 INFO L301 CfgBuilder]: Removed 61 assume(true) statements. [2021-12-19 18:42:34,301 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.12 06:42:34 BoogieIcfgContainer [2021-12-19 18:42:34,301 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-19 18:42:34,302 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-19 18:42:34,302 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-19 18:42:34,304 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-19 18:42:34,305 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-19 18:42:34,305 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 19.12 06:42:24" (1/3) ... [2021-12-19 18:42:34,306 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@552865f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.12 06:42:34, skipping insertion in model container [2021-12-19 18:42:34,306 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-19 18:42:34,306 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.12 06:42:24" (2/3) ... [2021-12-19 18:42:34,306 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@552865f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.12 06:42:34, skipping insertion in model container [2021-12-19 18:42:34,306 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-19 18:42:34,307 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.12 06:42:34" (3/3) ... [2021-12-19 18:42:34,307 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product31.cil.c [2021-12-19 18:42:34,333 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-19 18:42:34,333 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-19 18:42:34,333 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-19 18:42:34,333 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-19 18:42:34,333 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-19 18:42:34,333 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-19 18:42:34,334 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-19 18:42:34,334 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-19 18:42:34,439 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:34,582 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2431 [2021-12-19 18:42:34,583 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:34,583 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:34,597 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:34,598 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:34,598 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-19 18:42:34,619 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:34,712 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2431 [2021-12-19 18:42:34,713 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:34,713 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:34,716 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:34,716 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:34,726 INFO L791 eck$LassoCheckResult]: Stem: 7900#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4675#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 8727#L1702true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7738#L1695true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 6128#L1710true main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 2915#L1651true assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 6190#L1624true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5438#L564true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 5580#L589true aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1174#L999true assume 0 == initPersonOnFloor_~floor#1; 4587#L1000true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7844#L1107-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 324#L791true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1194#L803-2true assume { :end_inline_callOnFloor } true; 6763#L1143true assume { :end_inline_initPersonOnFloor } true; 7062#L1380true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5025#L564-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 8023#L589-1true angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3826#L999-1true assume 0 == initPersonOnFloor_~floor#1; 9453#L1000-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3379#L1107-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8365#L791-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 8215#L803-5true assume { :end_inline_callOnFloor } true; 5068#L1143-1true assume { :end_inline_initPersonOnFloor } true; 1733#L1391true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 3513#L2015true __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 468#L436true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 9180#L728true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 604#L755true isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 3137#L3316true stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 4876#L2700true assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2991#L1963true stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 2706#L2704true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 868#L2717true timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 586#L2853true assume !(0 != timeShift_~tmp___9~2#1); 3156#L2944true assume 1 == ~doorState~0;~doorState~0 := 0; 900#L2944-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 8469#L728-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 8592#L755-3true isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2754#L3316-1true stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 408#L2555true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4925#L1963-3true stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 289#L2568true timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 208#L2952true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 8804#L2612true assume !(1 == ~currentHeading~0); 2637#L2622true assume !(0 == ~currentFloorID~0); 3834#L2622-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2495#L2628-1true assume { :end_inline_continueInDirection } true; 11#L2961-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 1814#L454true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 1044#L455true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2127#L3156true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~1#1 := 0;existInLiftCallsInDirection_~i~1#1 := 1 + ~currentFloorID~0; 5266#L3160-2true [2021-12-19 18:42:34,727 INFO L793 eck$LassoCheckResult]: Loop: 5266#L3160-2true assume !false; 3479#L3161true assume existInLiftCallsInDirection_~i~1#1 < 5; 5#L3162true assume !(0 == existInLiftCallsInDirection_~i~1#1); 3720#L3175true assume !(1 == existInLiftCallsInDirection_~i~1#1); 4622#L3184true assume !(2 == existInLiftCallsInDirection_~i~1#1); 3139#L3193true assume !(3 == existInLiftCallsInDirection_~i~1#1); 5256#L3202true assume !(4 == existInLiftCallsInDirection_~i~1#1); 1636#L3203-1true existInLiftCallsInDirection_~i~1#1 := 1 + existInLiftCallsInDirection_~i~1#1; 5266#L3160-2true [2021-12-19 18:42:34,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:34,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1456644332, now seen corresponding path program 1 times [2021-12-19 18:42:34,743 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:34,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122037573] [2021-12-19 18:42:34,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:34,748 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:34,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:35,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:35,015 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:35,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122037573] [2021-12-19 18:42:35,016 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122037573] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:35,016 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:35,016 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:42:35,017 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [454137249] [2021-12-19 18:42:35,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:35,020 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:35,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:35,021 INFO L85 PathProgramCache]: Analyzing trace with hash -462995331, now seen corresponding path program 1 times [2021-12-19 18:42:35,021 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:35,022 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185440173] [2021-12-19 18:42:35,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:35,022 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:35,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:35,039 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:35,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:35,053 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:35,125 INFO L210 LassoAnalysis]: Preferences: [2021-12-19 18:42:35,125 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-19 18:42:35,126 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-19 18:42:35,126 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-19 18:42:35,126 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-19 18:42:35,126 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:35,126 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-19 18:42:35,126 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-19 18:42:35,126 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration1_Loop [2021-12-19 18:42:35,127 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-19 18:42:35,127 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-19 18:42:35,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-19 18:42:35,182 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-19 18:42:35,183 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-19 18:42:35,184 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:35,184 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:35,186 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:35,189 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-19 18:42:35,190 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-19 18:42:35,190 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-19 18:42:35,230 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2021-12-19 18:42:35,230 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:35,230 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:35,231 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:35,232 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-19 18:42:35,234 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-19 18:42:35,234 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-19 18:42:35,260 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-19 18:42:35,263 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-19 18:42:35,264 INFO L210 LassoAnalysis]: Preferences: [2021-12-19 18:42:35,264 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-19 18:42:35,264 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-19 18:42:35,264 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-19 18:42:35,264 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-19 18:42:35,264 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:35,264 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-19 18:42:35,264 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-19 18:42:35,264 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration1_Loop [2021-12-19 18:42:35,264 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-19 18:42:35,264 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-19 18:42:35,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-19 18:42:35,300 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-19 18:42:35,303 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-19 18:42:35,304 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:35,304 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:35,305 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:35,306 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-19 18:42:35,308 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-19 18:42:35,314 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-19 18:42:35,314 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-19 18:42:35,314 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-19 18:42:35,314 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-19 18:42:35,314 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-19 18:42:35,316 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-19 18:42:35,316 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-19 18:42:35,331 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-19 18:42:35,336 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-19 18:42:35,336 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-12-19 18:42:35,337 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:35,337 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:35,338 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:35,356 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-19 18:42:35,381 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-19 18:42:35,395 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-19 18:42:35,396 INFO L513 LassoAnalysis]: Proved termination. [2021-12-19 18:42:35,396 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~1#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~1#1 Supporting invariants [] [2021-12-19 18:42:35,415 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-12-19 18:42:35,417 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-19 18:42:35,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:35,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:35,543 INFO L263 TraceCheckSpWp]: Trace formula consists of 623 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-19 18:42:35,546 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-19 18:42:35,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:35,628 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-19 18:42:35,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-19 18:42:35,784 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:35,822 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-19 18:42:35,845 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:36,503 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-12-19 18:42:39,703 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 110945 states and 207693 transitions. Complement of second has 18 states. [2021-12-19 18:42:39,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-19 18:42:39,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:39,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 112967 transitions. [2021-12-19 18:42:39,821 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112967 transitions. Stem has 52 letters. Loop has 8 letters. [2021-12-19 18:42:39,822 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-19 18:42:39,822 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112967 transitions. Stem has 60 letters. Loop has 8 letters. [2021-12-19 18:42:39,822 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-19 18:42:39,823 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112967 transitions. Stem has 52 letters. Loop has 16 letters. [2021-12-19 18:42:39,823 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-19 18:42:39,823 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 110945 states and 207693 transitions. [2021-12-19 18:42:40,476 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15600 [2021-12-19 18:42:40,974 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 110945 states to 60222 states and 112690 transitions. [2021-12-19 18:42:40,988 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60192 [2021-12-19 18:42:41,062 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60193 [2021-12-19 18:42:41,063 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60222 states and 112690 transitions. [2021-12-19 18:42:41,066 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:41,066 INFO L681 BuchiCegarLoop]: Abstraction has 60222 states and 112690 transitions. [2021-12-19 18:42:41,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60222 states and 112690 transitions. [2021-12-19 18:42:41,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60222 to 17477. [2021-12-19 18:42:41,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17477 states, 17477 states have (on average 1.866739142873491) internal successors, (32625), 17476 states have internal predecessors, (32625), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:41,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17477 states to 17477 states and 32625 transitions. [2021-12-19 18:42:41,684 INFO L704 BuchiCegarLoop]: Abstraction has 17477 states and 32625 transitions. [2021-12-19 18:42:41,684 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:41,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-19 18:42:41,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-19 18:42:41,689 INFO L87 Difference]: Start difference. First operand 17477 states and 32625 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:42,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:42,004 INFO L93 Difference]: Finished difference Result 25252 states and 46989 transitions. [2021-12-19 18:42:42,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:42,005 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25252 states and 46989 transitions. [2021-12-19 18:42:42,209 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 8902 [2021-12-19 18:42:42,287 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25252 states to 25239 states and 46976 transitions. [2021-12-19 18:42:42,288 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25220 [2021-12-19 18:42:42,306 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25220 [2021-12-19 18:42:42,307 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25239 states and 46976 transitions. [2021-12-19 18:42:42,308 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:42,308 INFO L681 BuchiCegarLoop]: Abstraction has 25239 states and 46976 transitions. [2021-12-19 18:42:42,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25239 states and 46976 transitions. [2021-12-19 18:42:42,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25239 to 9724. [2021-12-19 18:42:42,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9724 states, 9724 states have (on average 1.8612710818593172) internal successors, (18099), 9723 states have internal predecessors, (18099), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:42,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9724 states to 9724 states and 18099 transitions. [2021-12-19 18:42:42,510 INFO L704 BuchiCegarLoop]: Abstraction has 9724 states and 18099 transitions. [2021-12-19 18:42:42,510 INFO L587 BuchiCegarLoop]: Abstraction has 9724 states and 18099 transitions. [2021-12-19 18:42:42,510 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-19 18:42:42,510 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9724 states and 18099 transitions. [2021-12-19 18:42:42,537 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2431 [2021-12-19 18:42:42,537 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:42,537 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:42,539 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:42,539 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:42,540 INFO L791 eck$LassoCheckResult]: Stem: 173074#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 171088#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 171089#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 173023#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 172230#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 169061#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 169062#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 171717#L564 assume !(0 == getOrigin_~person#1); 165680#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 163636#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 166271#L999 assume 0 == initPersonOnFloor_~floor#1; 166272#L1000 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 166080#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 164468#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 164263#L803-2 assume { :end_inline_callOnFloor } true; 166308#L1143 assume { :end_inline_initPersonOnFloor } true; 172597#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 171391#L564-1 assume !(0 == getOrigin_~person#1); 166774#L568-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 166775#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 170197#L999-1 assume 0 == initPersonOnFloor_~floor#1; 170198#L1000-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 163788#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 169691#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 165912#L803-5 assume { :end_inline_callOnFloor } true; 171440#L1143-1 assume { :end_inline_initPersonOnFloor } true; 167294#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 167295#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 164799#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 164800#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 165096#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 165097#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 169371#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 169176#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 168769#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 165663#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 165052#L2853 assume !(0 != timeShift_~tmp___9~2#1); 165054#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 165731#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 165732#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 166029#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 168831#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 164657#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 164658#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 164383#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 164187#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 164188#L2612 assume !(1 == ~currentHeading~0); 168676#L2622 assume !(0 == ~currentFloorID~0); 168677#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 168475#L2628-1 assume { :end_inline_continueInDirection } true; 163661#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 163662#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 166024#L455 assume !(1 == ~prevDir~0); 166025#L481 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 167726#L3156-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~1#1 := 0;existInLiftCallsInDirection_~i~1#1 := 1 + ~currentFloorID~0; 167728#L3160-8 [2021-12-19 18:42:42,540 INFO L793 eck$LassoCheckResult]: Loop: 167728#L3160-8 assume !false; 168492#L3161-2 assume existInLiftCallsInDirection_~i~1#1 < 5; 168493#L3162-2 assume !(0 == existInLiftCallsInDirection_~i~1#1); 166424#L3175-2 assume !(1 == existInLiftCallsInDirection_~i~1#1); 165047#L3184-2 assume !(2 == existInLiftCallsInDirection_~i~1#1); 165049#L3193-2 assume !(3 == existInLiftCallsInDirection_~i~1#1); 171850#L3202-2 assume !(4 == existInLiftCallsInDirection_~i~1#1); 172983#L3203-5 existInLiftCallsInDirection_~i~1#1 := 1 + existInLiftCallsInDirection_~i~1#1; 167728#L3160-8 [2021-12-19 18:42:42,541 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:42,541 INFO L85 PathProgramCache]: Analyzing trace with hash -1563199095, now seen corresponding path program 1 times [2021-12-19 18:42:42,542 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:42,542 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1591962988] [2021-12-19 18:42:42,542 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:42,542 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:42,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:42,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:42,611 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:42,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1591962988] [2021-12-19 18:42:42,611 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1591962988] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:42,611 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:42,611 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-19 18:42:42,611 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1889847742] [2021-12-19 18:42:42,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:42,612 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:42,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:42,612 INFO L85 PathProgramCache]: Analyzing trace with hash 1614243709, now seen corresponding path program 1 times [2021-12-19 18:42:42,613 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:42,613 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533426042] [2021-12-19 18:42:42,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:42,613 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:42,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:42,617 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:42,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:42,621 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:42,646 INFO L210 LassoAnalysis]: Preferences: [2021-12-19 18:42:42,646 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-19 18:42:42,647 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-19 18:42:42,647 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-19 18:42:42,647 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-19 18:42:42,647 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:42,647 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-19 18:42:42,647 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-19 18:42:42,647 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration2_Loop [2021-12-19 18:42:42,647 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-19 18:42:42,648 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-19 18:42:42,648 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-19 18:42:42,682 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-19 18:42:42,682 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-19 18:42:42,682 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:42,683 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:42,684 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:42,685 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-19 18:42:42,686 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-19 18:42:42,686 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-19 18:42:42,731 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-12-19 18:42:42,732 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:42,732 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:42,742 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:42,746 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-19 18:42:42,747 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-19 18:42:42,747 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-19 18:42:42,779 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-19 18:42:42,794 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-12-19 18:42:42,795 INFO L210 LassoAnalysis]: Preferences: [2021-12-19 18:42:42,795 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-19 18:42:42,795 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-19 18:42:42,795 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-19 18:42:42,795 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-19 18:42:42,795 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:42,795 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-19 18:42:42,795 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-19 18:42:42,795 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration2_Loop [2021-12-19 18:42:42,795 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-19 18:42:42,795 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-19 18:42:42,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-19 18:42:42,924 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-19 18:42:42,925 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-19 18:42:42,925 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:42,925 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:42,926 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:42,927 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-19 18:42:42,928 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-19 18:42:42,933 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-19 18:42:42,934 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-19 18:42:42,934 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-19 18:42:42,934 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-19 18:42:42,934 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-19 18:42:42,935 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-19 18:42:42,935 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-19 18:42:42,936 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-19 18:42:42,938 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-19 18:42:42,938 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-19 18:42:42,938 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-19 18:42:42,938 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-19 18:42:42,939 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-19 18:42:42,940 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-19 18:42:42,941 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-19 18:42:42,941 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-19 18:42:42,941 INFO L513 LassoAnalysis]: Proved termination. [2021-12-19 18:42:42,941 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~1#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~1#1 Supporting invariants [] [2021-12-19 18:42:42,966 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2021-12-19 18:42:42,966 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-19 18:42:42,977 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:43,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:43,097 INFO L263 TraceCheckSpWp]: Trace formula consists of 626 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-19 18:42:43,098 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-19 18:42:43,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:43,244 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-19 18:42:43,244 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-19 18:42:43,394 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:43,395 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-19 18:42:43,395 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9724 states and 18099 transitions. cyclomatic complexity: 8409 Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:43,947 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2021-12-19 18:42:46,538 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9724 states and 18099 transitions. cyclomatic complexity: 8409. Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 102956 states and 192585 transitions. Complement of second has 17 states. [2021-12-19 18:42:46,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-19 18:42:46,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:46,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 98068 transitions. [2021-12-19 18:42:46,620 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 98068 transitions. Stem has 55 letters. Loop has 8 letters. [2021-12-19 18:42:46,620 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-19 18:42:46,620 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 98068 transitions. Stem has 63 letters. Loop has 8 letters. [2021-12-19 18:42:46,621 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-19 18:42:46,621 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 98068 transitions. Stem has 55 letters. Loop has 16 letters. [2021-12-19 18:42:46,621 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-19 18:42:46,621 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 102956 states and 192585 transitions. [2021-12-19 18:42:46,999 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15600 [2021-12-19 18:42:47,186 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 102956 states to 60228 states and 112597 transitions. [2021-12-19 18:42:47,186 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60179 [2021-12-19 18:42:47,227 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60180 [2021-12-19 18:42:47,227 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60228 states and 112597 transitions. [2021-12-19 18:42:47,238 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:47,238 INFO L681 BuchiCegarLoop]: Abstraction has 60228 states and 112597 transitions. [2021-12-19 18:42:47,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60228 states and 112597 transitions. [2021-12-19 18:42:47,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60228 to 9748. [2021-12-19 18:42:47,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9748 states, 9748 states have (on average 1.8605867870332375) internal successors, (18137), 9747 states have internal predecessors, (18137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:47,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9748 states to 9748 states and 18137 transitions. [2021-12-19 18:42:47,788 INFO L704 BuchiCegarLoop]: Abstraction has 9748 states and 18137 transitions. [2021-12-19 18:42:47,788 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:47,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:42:47,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:42:47,789 INFO L87 Difference]: Start difference. First operand 9748 states and 18137 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:48,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:48,422 INFO L93 Difference]: Finished difference Result 29027 states and 53981 transitions. [2021-12-19 18:42:48,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:48,423 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29027 states and 53981 transitions. [2021-12-19 18:42:48,543 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2021-12-19 18:42:48,634 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29027 states to 29027 states and 53981 transitions. [2021-12-19 18:42:48,634 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28913 [2021-12-19 18:42:48,656 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28913 [2021-12-19 18:42:48,657 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29027 states and 53981 transitions. [2021-12-19 18:42:48,659 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:48,659 INFO L681 BuchiCegarLoop]: Abstraction has 29027 states and 53981 transitions. [2021-12-19 18:42:48,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29027 states and 53981 transitions. [2021-12-19 18:42:48,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29027 to 9763. [2021-12-19 18:42:48,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9763 states, 9763 states have (on average 1.8592645703165012) internal successors, (18152), 9762 states have internal predecessors, (18152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:48,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9763 states to 9763 states and 18152 transitions. [2021-12-19 18:42:48,863 INFO L704 BuchiCegarLoop]: Abstraction has 9763 states and 18152 transitions. [2021-12-19 18:42:48,863 INFO L587 BuchiCegarLoop]: Abstraction has 9763 states and 18152 transitions. [2021-12-19 18:42:48,863 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-19 18:42:48,863 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9763 states and 18152 transitions. [2021-12-19 18:42:48,889 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:48,889 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:48,889 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:48,891 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:48,891 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:48,892 INFO L791 eck$LassoCheckResult]: Stem: 324781#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 322792#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 322793#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 324730#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 323937#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 320761#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 320762#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 323420#L564 assume !(0 == getOrigin_~person#1); 317373#L568 assume !(1 == getOrigin_~person#1); 317375#L572 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 315326#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 323524#L999 assume 0 == initPersonOnFloor_~floor#1; 322694#L1000 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 317774#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 316158#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 315953#L803-2 assume { :end_inline_callOnFloor } true; 318001#L1143 assume { :end_inline_initPersonOnFloor } true; 324304#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 323095#L564-1 assume !(0 == getOrigin_~person#1); 318469#L568-1 assume !(1 == getOrigin_~person#1); 318471#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 320639#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 325069#L999-1 assume 0 == initPersonOnFloor_~floor#1; 325057#L1000-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 315478#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 321391#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 317606#L803-5 assume { :end_inline_callOnFloor } true; 323144#L1143-1 assume { :end_inline_initPersonOnFloor } true; 318990#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 318991#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 316489#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 316490#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 316789#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 316790#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 321071#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 320876#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 320468#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 317356#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 316745#L2853 assume !(0 != timeShift_~tmp___9~2#1); 316747#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 317425#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 317426#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 317723#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 320530#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 316347#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 316348#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 316073#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 315877#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 315878#L2612 assume !(1 == ~currentHeading~0); 320375#L2622 assume !(0 == ~currentFloorID~0); 320376#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 320170#L2628-1 assume { :end_inline_continueInDirection } true; 315351#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 315352#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 317718#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 317720#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 319611#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 319163#L3226-2 [2021-12-19 18:42:48,892 INFO L793 eck$LassoCheckResult]: Loop: 319163#L3226-2 assume !false; 319929#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 319930#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 315596#L3235-2 assume !false; 315597#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 319044#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 319163#L3226-2 [2021-12-19 18:42:48,892 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:48,892 INFO L85 PathProgramCache]: Analyzing trace with hash 2016865714, now seen corresponding path program 1 times [2021-12-19 18:42:48,893 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:48,893 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [522695142] [2021-12-19 18:42:48,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:48,894 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:48,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:48,943 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:48,944 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:48,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [522695142] [2021-12-19 18:42:48,944 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [522695142] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:48,946 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:48,946 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-19 18:42:48,947 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849359384] [2021-12-19 18:42:48,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:48,948 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:48,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:48,948 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 1 times [2021-12-19 18:42:48,948 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:48,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1967644378] [2021-12-19 18:42:48,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:48,951 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:48,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:48,961 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:48,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:48,967 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:48,994 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:48,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-19 18:42:48,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-19 18:42:48,995 INFO L87 Difference]: Start difference. First operand 9763 states and 18152 transitions. cyclomatic complexity: 8424 Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:49,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:49,267 INFO L93 Difference]: Finished difference Result 19347 states and 35977 transitions. [2021-12-19 18:42:49,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-19 18:42:49,267 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19347 states and 35977 transitions. [2021-12-19 18:42:49,330 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4870 [2021-12-19 18:42:49,380 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19347 states to 19347 states and 35977 transitions. [2021-12-19 18:42:49,380 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19271 [2021-12-19 18:42:49,392 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19271 [2021-12-19 18:42:49,393 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19347 states and 35977 transitions. [2021-12-19 18:42:49,393 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:49,393 INFO L681 BuchiCegarLoop]: Abstraction has 19347 states and 35977 transitions. [2021-12-19 18:42:49,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19347 states and 35977 transitions. [2021-12-19 18:42:49,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19347 to 9729. [2021-12-19 18:42:49,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9729 states, 9729 states have (on average 1.85877274128893) internal successors, (18084), 9728 states have internal predecessors, (18084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:49,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18084 transitions. [2021-12-19 18:42:49,542 INFO L704 BuchiCegarLoop]: Abstraction has 9729 states and 18084 transitions. [2021-12-19 18:42:49,542 INFO L587 BuchiCegarLoop]: Abstraction has 9729 states and 18084 transitions. [2021-12-19 18:42:49,542 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-19 18:42:49,542 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18084 transitions. [2021-12-19 18:42:49,563 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:49,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:49,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:49,567 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:49,567 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:49,567 INFO L791 eck$LassoCheckResult]: Stem: 353868#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 351881#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 351882#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 353816#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 353023#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 349857#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 349858#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 352507#L564 assume !(0 == getOrigin_~person#1); 346486#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 346487#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 347078#L999 assume !(0 == initPersonOnFloor_~floor#1); 347079#L1026 assume !(1 == initPersonOnFloor_~floor#1); 352901#L1053 assume !(2 == initPersonOnFloor_~floor#1); 353400#L1080 assume 3 == initPersonOnFloor_~floor#1; 350587#L1081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 348419#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 345271#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 345069#L803-2 assume { :end_inline_callOnFloor } true; 347113#L1143 assume { :end_inline_initPersonOnFloor } true; 353390#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 352182#L564-1 assume !(0 == getOrigin_~person#1); 347578#L568-1 assume !(1 == getOrigin_~person#1); 347580#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 349736#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 354152#L999-1 assume 0 == initPersonOnFloor_~floor#1; 354143#L1000-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 344596#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 350490#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 346718#L803-5 assume { :end_inline_callOnFloor } true; 352231#L1143-1 assume { :end_inline_initPersonOnFloor } true; 348094#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 348095#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 345602#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 345603#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 345905#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 345906#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 350166#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 349971#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 349565#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 346469#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 345862#L2853 assume !(0 != timeShift_~tmp___9~2#1); 345864#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 346537#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 346538#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 346843#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 349628#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 345460#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 345461#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 345186#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 344996#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 344997#L2612 assume !(1 == ~currentHeading~0); 349474#L2622 assume !(0 == ~currentFloorID~0); 349475#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 349272#L2628-1 assume { :end_inline_continueInDirection } true; 344464#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 344465#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 346831#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 346833#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 348714#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 348265#L3226-2 [2021-12-19 18:42:49,568 INFO L793 eck$LassoCheckResult]: Loop: 348265#L3226-2 assume !false; 349035#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 349036#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 344709#L3235-2 assume !false; 344710#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 348146#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 348265#L3226-2 [2021-12-19 18:42:49,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:49,568 INFO L85 PathProgramCache]: Analyzing trace with hash -461795163, now seen corresponding path program 1 times [2021-12-19 18:42:49,568 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:49,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657703297] [2021-12-19 18:42:49,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:49,572 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:49,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:49,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:49,620 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:49,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657703297] [2021-12-19 18:42:49,621 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657703297] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:49,621 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:49,621 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:42:49,621 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837599144] [2021-12-19 18:42:49,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:49,621 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:49,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:49,622 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 2 times [2021-12-19 18:42:49,622 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:49,622 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [478267814] [2021-12-19 18:42:49,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:49,622 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:49,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:49,627 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:49,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:49,638 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:49,654 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:49,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-19 18:42:49,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-19 18:42:49,655 INFO L87 Difference]: Start difference. First operand 9729 states and 18084 transitions. cyclomatic complexity: 8390 Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:49,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:49,911 INFO L93 Difference]: Finished difference Result 13583 states and 25248 transitions. [2021-12-19 18:42:49,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:49,913 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13583 states and 25248 transitions. [2021-12-19 18:42:49,966 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4502 [2021-12-19 18:42:50,174 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13583 states to 13583 states and 25248 transitions. [2021-12-19 18:42:50,175 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13545 [2021-12-19 18:42:50,183 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13545 [2021-12-19 18:42:50,183 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13583 states and 25248 transitions. [2021-12-19 18:42:50,191 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:50,192 INFO L681 BuchiCegarLoop]: Abstraction has 13583 states and 25248 transitions. [2021-12-19 18:42:50,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13583 states and 25248 transitions. [2021-12-19 18:42:50,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13583 to 9729. [2021-12-19 18:42:50,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9729 states, 9729 states have (on average 1.8581560283687943) internal successors, (18078), 9728 states have internal predecessors, (18078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:50,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18078 transitions. [2021-12-19 18:42:50,321 INFO L704 BuchiCegarLoop]: Abstraction has 9729 states and 18078 transitions. [2021-12-19 18:42:50,321 INFO L587 BuchiCegarLoop]: Abstraction has 9729 states and 18078 transitions. [2021-12-19 18:42:50,321 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-19 18:42:50,321 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18078 transitions. [2021-12-19 18:42:50,344 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:50,344 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:50,344 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:50,345 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:50,345 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:50,346 INFO L791 eck$LassoCheckResult]: Stem: 377193#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 375206#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 375207#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 377141#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 376348#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 373182#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 373183#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 375832#L564 assume !(0 == getOrigin_~person#1); 369811#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 369812#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 370400#L999 assume !(0 == initPersonOnFloor_~floor#1); 370401#L1026 assume !(1 == initPersonOnFloor_~floor#1); 376226#L1053 assume !(2 == initPersonOnFloor_~floor#1); 376725#L1080 assume 3 == initPersonOnFloor_~floor#1; 373912#L1081 assume !(0 == initPersonOnFloor_~person#1); 373913#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 371744#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 368596#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 368391#L803-2 assume { :end_inline_callOnFloor } true; 370438#L1143 assume { :end_inline_initPersonOnFloor } true; 376715#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 375507#L564-1 assume !(0 == getOrigin_~person#1); 370903#L568-1 assume !(1 == getOrigin_~person#1); 370905#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 373061#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 377477#L999-1 assume 0 == initPersonOnFloor_~floor#1; 377468#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 368700#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 367916#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 373813#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 370043#L803-5 assume { :end_inline_callOnFloor } true; 375556#L1143-1 assume { :end_inline_initPersonOnFloor } true; 371417#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 371418#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 368927#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 368928#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 369227#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 369228#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 373491#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 373296#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 372890#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 369794#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 369185#L2853 assume !(0 != timeShift_~tmp___9~2#1); 369187#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 369862#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 369863#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 370165#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 372952#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 368785#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 368786#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 368511#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 368315#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 368316#L2612 assume !(1 == ~currentHeading~0); 372799#L2622 assume !(0 == ~currentFloorID~0); 372800#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 372597#L2628-1 assume { :end_inline_continueInDirection } true; 367789#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 367790#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 370156#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 370158#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 372039#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 371590#L3226-2 [2021-12-19 18:42:50,347 INFO L793 eck$LassoCheckResult]: Loop: 371590#L3226-2 assume !false; 372360#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 372361#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 368034#L3235-2 assume !false; 368035#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 371471#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 371590#L3226-2 [2021-12-19 18:42:50,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:50,347 INFO L85 PathProgramCache]: Analyzing trace with hash -122478231, now seen corresponding path program 1 times [2021-12-19 18:42:50,347 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:50,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1311300045] [2021-12-19 18:42:50,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:50,348 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:50,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:50,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:50,401 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:50,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1311300045] [2021-12-19 18:42:50,401 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1311300045] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:50,401 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:50,402 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-19 18:42:50,402 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [867204337] [2021-12-19 18:42:50,402 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:50,403 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:50,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:50,403 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 3 times [2021-12-19 18:42:50,403 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:50,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1226087823] [2021-12-19 18:42:50,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:50,404 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:50,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:50,408 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:50,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:50,414 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:50,427 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:50,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:42:50,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:42:50,428 INFO L87 Difference]: Start difference. First operand 9729 states and 18078 transitions. cyclomatic complexity: 8384 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:50,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:50,930 INFO L93 Difference]: Finished difference Result 28986 states and 53895 transitions. [2021-12-19 18:42:50,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:50,931 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28986 states and 53895 transitions. [2021-12-19 18:42:51,034 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2021-12-19 18:42:51,117 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28986 states to 28986 states and 53895 transitions. [2021-12-19 18:42:51,117 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28872 [2021-12-19 18:42:51,137 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28872 [2021-12-19 18:42:51,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28986 states and 53895 transitions. [2021-12-19 18:42:51,150 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:51,151 INFO L681 BuchiCegarLoop]: Abstraction has 28986 states and 53895 transitions. [2021-12-19 18:42:51,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28986 states and 53895 transitions. [2021-12-19 18:42:51,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28986 to 9733. [2021-12-19 18:42:51,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9733 states, 9733 states have (on average 1.8577006061851433) internal successors, (18081), 9732 states have internal predecessors, (18081), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:51,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9733 states to 9733 states and 18081 transitions. [2021-12-19 18:42:51,334 INFO L704 BuchiCegarLoop]: Abstraction has 9733 states and 18081 transitions. [2021-12-19 18:42:51,334 INFO L587 BuchiCegarLoop]: Abstraction has 9733 states and 18081 transitions. [2021-12-19 18:42:51,334 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-19 18:42:51,334 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9733 states and 18081 transitions. [2021-12-19 18:42:51,355 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:51,356 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:51,356 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:51,358 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:51,358 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:51,358 INFO L791 eck$LassoCheckResult]: Stem: 415920#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 413933#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 413934#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 415868#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 415075#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 411909#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 411910#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 414559#L564 assume !(0 == getOrigin_~person#1); 408536#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 408537#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 409125#L999 assume !(0 == initPersonOnFloor_~floor#1); 409126#L1026 assume !(1 == initPersonOnFloor_~floor#1); 414953#L1053 assume !(2 == initPersonOnFloor_~floor#1); 415452#L1080 assume 3 == initPersonOnFloor_~floor#1; 412639#L1081 assume !(0 == initPersonOnFloor_~person#1); 412640#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 410471#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 407320#L791 assume !(0 == callOnFloor_~floorID#1); 407162#L794 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 407115#L803-2 assume { :end_inline_callOnFloor } true; 409163#L1143 assume { :end_inline_initPersonOnFloor } true; 415442#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 414234#L564-1 assume !(0 == getOrigin_~person#1); 409628#L568-1 assume !(1 == getOrigin_~person#1); 409630#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 411788#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 416205#L999-1 assume 0 == initPersonOnFloor_~floor#1; 416196#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 407424#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 406640#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 412540#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 408768#L803-5 assume { :end_inline_callOnFloor } true; 414283#L1143-1 assume { :end_inline_initPersonOnFloor } true; 410142#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 410143#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 407651#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 407652#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 407952#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 407953#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 412218#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 412023#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 411617#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 408519#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 407910#L2853 assume !(0 != timeShift_~tmp___9~2#1); 407912#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 408587#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 408588#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 408890#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 411679#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 407509#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 407510#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 407235#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 407039#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 407040#L2612 assume !(1 == ~currentHeading~0); 411526#L2622 assume !(0 == ~currentFloorID~0); 411527#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 411324#L2628-1 assume { :end_inline_continueInDirection } true; 406513#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 406514#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 408881#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 408883#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 410766#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 410315#L3226-2 [2021-12-19 18:42:51,358 INFO L793 eck$LassoCheckResult]: Loop: 410315#L3226-2 assume !false; 411087#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 411088#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 406758#L3235-2 assume !false; 406759#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 410196#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 410315#L3226-2 [2021-12-19 18:42:51,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:51,361 INFO L85 PathProgramCache]: Analyzing trace with hash -940719868, now seen corresponding path program 1 times [2021-12-19 18:42:51,362 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:51,362 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2034347603] [2021-12-19 18:42:51,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:51,362 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:51,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:51,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:51,386 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:51,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2034347603] [2021-12-19 18:42:51,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2034347603] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:51,386 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:51,387 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-19 18:42:51,387 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1849061750] [2021-12-19 18:42:51,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:51,387 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:51,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:51,387 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 4 times [2021-12-19 18:42:51,388 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:51,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175422521] [2021-12-19 18:42:51,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:51,388 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:51,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:51,391 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:51,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:51,393 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:51,405 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:51,406 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:42:51,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:42:51,406 INFO L87 Difference]: Start difference. First operand 9733 states and 18081 transitions. cyclomatic complexity: 8383 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:51,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:51,905 INFO L93 Difference]: Finished difference Result 28991 states and 53897 transitions. [2021-12-19 18:42:51,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:51,906 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28991 states and 53897 transitions. [2021-12-19 18:42:52,031 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2021-12-19 18:42:52,127 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28991 states to 28991 states and 53897 transitions. [2021-12-19 18:42:52,127 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28877 [2021-12-19 18:42:52,149 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28877 [2021-12-19 18:42:52,149 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28991 states and 53897 transitions. [2021-12-19 18:42:52,151 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:52,151 INFO L681 BuchiCegarLoop]: Abstraction has 28991 states and 53897 transitions. [2021-12-19 18:42:52,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28991 states and 53897 transitions. [2021-12-19 18:42:52,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28991 to 9739. [2021-12-19 18:42:52,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9739 states, 9739 states have (on average 1.8570695143238525) internal successors, (18086), 9738 states have internal predecessors, (18086), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:52,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9739 states to 9739 states and 18086 transitions. [2021-12-19 18:42:52,360 INFO L704 BuchiCegarLoop]: Abstraction has 9739 states and 18086 transitions. [2021-12-19 18:42:52,360 INFO L587 BuchiCegarLoop]: Abstraction has 9739 states and 18086 transitions. [2021-12-19 18:42:52,360 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-19 18:42:52,360 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9739 states and 18086 transitions. [2021-12-19 18:42:52,388 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:52,388 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:52,388 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:52,389 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:52,389 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:52,389 INFO L791 eck$LassoCheckResult]: Stem: 454654#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 452667#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 452668#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 454603#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 453809#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 450643#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 450644#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 453293#L564 assume !(0 == getOrigin_~person#1); 447270#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 447271#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 447859#L999 assume !(0 == initPersonOnFloor_~floor#1); 447860#L1026 assume !(1 == initPersonOnFloor_~floor#1); 453687#L1053 assume !(2 == initPersonOnFloor_~floor#1); 454187#L1080 assume 3 == initPersonOnFloor_~floor#1; 451373#L1081 assume !(0 == initPersonOnFloor_~person#1); 451374#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 449201#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 446053#L791 assume !(0 == callOnFloor_~floorID#1); 445895#L794 assume !(1 == callOnFloor_~floorID#1); 445847#L797 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 445848#L803-2 assume { :end_inline_callOnFloor } true; 447895#L1143 assume { :end_inline_initPersonOnFloor } true; 454177#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 452968#L564-1 assume !(0 == getOrigin_~person#1); 448360#L568-1 assume !(1 == getOrigin_~person#1); 448362#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 450522#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 454941#L999-1 assume 0 == initPersonOnFloor_~floor#1; 454932#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 446158#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 445373#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 454949#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 447502#L803-5 assume { :end_inline_callOnFloor } true; 453017#L1143-1 assume { :end_inline_initPersonOnFloor } true; 448877#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 448878#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 446385#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 446386#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 446686#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 446687#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 450952#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 450757#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 450351#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 447253#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 446642#L2853 assume !(0 != timeShift_~tmp___9~2#1); 446644#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 447321#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 447322#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 447619#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 450413#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 446243#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 446244#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 445968#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 445772#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 445773#L2612 assume !(1 == ~currentHeading~0); 450260#L2622 assume !(0 == ~currentFloorID~0); 450261#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 450058#L2628-1 assume { :end_inline_continueInDirection } true; 445246#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 445247#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 447614#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 447616#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 449500#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 449050#L3226-2 [2021-12-19 18:42:52,390 INFO L793 eck$LassoCheckResult]: Loop: 449050#L3226-2 assume !false; 449818#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 449819#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 445491#L3235-2 assume !false; 445492#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 448931#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 449050#L3226-2 [2021-12-19 18:42:52,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:52,390 INFO L85 PathProgramCache]: Analyzing trace with hash -1364909148, now seen corresponding path program 1 times [2021-12-19 18:42:52,390 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:52,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1224839385] [2021-12-19 18:42:52,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:52,391 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:52,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:52,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:52,416 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:52,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1224839385] [2021-12-19 18:42:52,416 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1224839385] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:52,416 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:52,416 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-19 18:42:52,416 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741585838] [2021-12-19 18:42:52,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:52,417 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:52,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:52,417 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 5 times [2021-12-19 18:42:52,417 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:52,417 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161997872] [2021-12-19 18:42:52,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:52,418 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:52,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:52,420 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:52,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:52,423 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:52,436 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:52,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:42:52,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:42:52,436 INFO L87 Difference]: Start difference. First operand 9739 states and 18086 transitions. cyclomatic complexity: 8382 Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:52,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:52,877 INFO L93 Difference]: Finished difference Result 28998 states and 53901 transitions. [2021-12-19 18:42:52,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:52,877 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28998 states and 53901 transitions. [2021-12-19 18:42:52,989 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2021-12-19 18:42:53,076 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28998 states to 28998 states and 53901 transitions. [2021-12-19 18:42:53,077 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28884 [2021-12-19 18:42:53,101 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28884 [2021-12-19 18:42:53,101 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28998 states and 53901 transitions. [2021-12-19 18:42:53,101 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:53,101 INFO L681 BuchiCegarLoop]: Abstraction has 28998 states and 53901 transitions. [2021-12-19 18:42:53,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28998 states and 53901 transitions. [2021-12-19 18:42:53,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28998 to 9747. [2021-12-19 18:42:53,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9747 states, 9747 states have (on average 1.8562634656817483) internal successors, (18093), 9746 states have internal predecessors, (18093), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:53,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18093 transitions. [2021-12-19 18:42:53,286 INFO L704 BuchiCegarLoop]: Abstraction has 9747 states and 18093 transitions. [2021-12-19 18:42:53,286 INFO L587 BuchiCegarLoop]: Abstraction has 9747 states and 18093 transitions. [2021-12-19 18:42:53,286 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-19 18:42:53,286 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18093 transitions. [2021-12-19 18:42:53,310 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:53,310 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:53,310 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:53,311 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:53,311 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:53,311 INFO L791 eck$LassoCheckResult]: Stem: 493405#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 491415#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 491416#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 493353#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 492557#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 489390#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 489391#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 492041#L564 assume !(0 == getOrigin_~person#1); 486015#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 486016#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 486607#L999 assume !(0 == initPersonOnFloor_~floor#1); 486608#L1026 assume !(1 == initPersonOnFloor_~floor#1); 492435#L1053 assume !(2 == initPersonOnFloor_~floor#1); 492936#L1080 assume 3 == initPersonOnFloor_~floor#1; 490121#L1081 assume !(0 == initPersonOnFloor_~person#1); 490122#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 487950#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 484798#L791 assume !(0 == callOnFloor_~floorID#1); 484640#L794 assume !(1 == callOnFloor_~floorID#1); 484596#L797 assume !(2 == callOnFloor_~floorID#1); 484597#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 486642#L803-2 assume { :end_inline_callOnFloor } true; 486643#L1143 assume { :end_inline_initPersonOnFloor } true; 492926#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 491716#L564-1 assume !(0 == getOrigin_~person#1); 487108#L568-1 assume !(1 == getOrigin_~person#1); 487110#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 489269#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 493689#L999-1 assume 0 == initPersonOnFloor_~floor#1; 493680#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 484903#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 484124#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 493698#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 486247#L803-5 assume { :end_inline_callOnFloor } true; 491765#L1143-1 assume { :end_inline_initPersonOnFloor } true; 487625#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 487626#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 485130#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 485131#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 485434#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 485435#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 489699#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 489504#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 489097#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 485998#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 485391#L2853 assume !(0 != timeShift_~tmp___9~2#1); 485393#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 486066#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 486067#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 486372#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 489160#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 484988#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 484989#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 484713#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 484524#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 484525#L2612 assume !(1 == ~currentHeading~0); 489006#L2622 assume !(0 == ~currentFloorID~0); 489007#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 488804#L2628-1 assume { :end_inline_continueInDirection } true; 483992#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 483993#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 486360#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 486362#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 488246#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 487796#L3226-2 [2021-12-19 18:42:53,311 INFO L793 eck$LassoCheckResult]: Loop: 487796#L3226-2 assume !false; 488567#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 488568#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 484237#L3235-2 assume !false; 484238#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 487677#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 487796#L3226-2 [2021-12-19 18:42:53,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:53,312 INFO L85 PathProgramCache]: Analyzing trace with hash 1836590047, now seen corresponding path program 1 times [2021-12-19 18:42:53,312 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:53,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702027328] [2021-12-19 18:42:53,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:53,312 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:53,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:53,342 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:53,342 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:53,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702027328] [2021-12-19 18:42:53,342 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702027328] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:53,342 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:53,342 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:42:53,343 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427930275] [2021-12-19 18:42:53,343 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:53,343 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:53,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:53,343 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 6 times [2021-12-19 18:42:53,343 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:53,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1468450221] [2021-12-19 18:42:53,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:53,344 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:53,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:53,346 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:53,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:53,348 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:53,360 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:53,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-19 18:42:53,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-19 18:42:53,361 INFO L87 Difference]: Start difference. First operand 9747 states and 18093 transitions. cyclomatic complexity: 8381 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:53,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:53,729 INFO L93 Difference]: Finished difference Result 21365 states and 39698 transitions. [2021-12-19 18:42:53,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-19 18:42:53,729 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21365 states and 39698 transitions. [2021-12-19 18:42:53,807 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8636 [2021-12-19 18:42:53,867 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21365 states to 21365 states and 39698 transitions. [2021-12-19 18:42:53,867 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21327 [2021-12-19 18:42:53,883 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21327 [2021-12-19 18:42:53,883 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21365 states and 39698 transitions. [2021-12-19 18:42:53,884 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:53,884 INFO L681 BuchiCegarLoop]: Abstraction has 21365 states and 39698 transitions. [2021-12-19 18:42:53,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21365 states and 39698 transitions. [2021-12-19 18:42:54,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21365 to 9733. [2021-12-19 18:42:54,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9733 states, 9733 states have (on average 1.8562622007603) internal successors, (18067), 9732 states have internal predecessors, (18067), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:54,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9733 states to 9733 states and 18067 transitions. [2021-12-19 18:42:54,036 INFO L704 BuchiCegarLoop]: Abstraction has 9733 states and 18067 transitions. [2021-12-19 18:42:54,036 INFO L587 BuchiCegarLoop]: Abstraction has 9733 states and 18067 transitions. [2021-12-19 18:42:54,036 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-19 18:42:54,036 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9733 states and 18067 transitions. [2021-12-19 18:42:54,058 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:54,058 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:54,058 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:54,059 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:54,059 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:54,059 INFO L791 eck$LassoCheckResult]: Stem: 524521#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 522536#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 522537#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 524470#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 523679#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 520510#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 520511#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 523164#L564 assume !(0 == getOrigin_~person#1); 517140#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 517141#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 517728#L999 assume !(0 == initPersonOnFloor_~floor#1); 517729#L1026 assume !(1 == initPersonOnFloor_~floor#1); 523558#L1053 assume !(2 == initPersonOnFloor_~floor#1); 524056#L1080 assume 3 == initPersonOnFloor_~floor#1; 521240#L1081 assume !(0 == initPersonOnFloor_~person#1); 521241#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 519070#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 515924#L791 assume !(0 == callOnFloor_~floorID#1); 515766#L794 assume !(1 == callOnFloor_~floorID#1); 515719#L797 assume !(2 == callOnFloor_~floorID#1); 515720#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 517764#L803-2 assume { :end_inline_callOnFloor } true; 517765#L1143 assume { :end_inline_initPersonOnFloor } true; 524046#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 522837#L564-1 assume !(0 == getOrigin_~person#1); 518230#L568-1 assume !(1 == getOrigin_~person#1); 518231#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 524548#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 521644#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 521645#L1026-1 assume 1 == initPersonOnFloor_~floor#1; 523815#L1027-2 assume !(0 == initPersonOnFloor_~person#1); 517342#L1030-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 516258#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 524647#L791-2 assume !(0 == callOnFloor_~floorID#1); 524648#L794-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 517372#L803-5 assume { :end_inline_callOnFloor } true; 522886#L1143-1 assume { :end_inline_initPersonOnFloor } true; 518746#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 518747#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 516255#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 516256#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 516556#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 516557#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 520819#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 520624#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 520220#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 517123#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 516512#L2853 assume !(0 != timeShift_~tmp___9~2#1); 516514#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 517191#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 517192#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 517489#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 520282#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 516113#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 516114#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 515839#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 515644#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 515645#L2612 assume !(1 == ~currentHeading~0); 520129#L2622 assume !(0 == ~currentFloorID~0); 520130#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 519927#L2628-1 assume { :end_inline_continueInDirection } true; 515120#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 515121#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 517484#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 517486#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 519369#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 518919#L3226-2 [2021-12-19 18:42:54,059 INFO L793 eck$LassoCheckResult]: Loop: 518919#L3226-2 assume !false; 519687#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 519688#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 515362#L3235-2 assume !false; 515363#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 518800#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 518919#L3226-2 [2021-12-19 18:42:54,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:54,060 INFO L85 PathProgramCache]: Analyzing trace with hash -852779595, now seen corresponding path program 1 times [2021-12-19 18:42:54,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:54,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [894240912] [2021-12-19 18:42:54,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:54,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:54,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:54,086 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:54,087 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:54,087 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [894240912] [2021-12-19 18:42:54,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [894240912] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:54,087 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:54,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:42:54,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [398508610] [2021-12-19 18:42:54,087 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:54,088 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:54,088 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:54,088 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 7 times [2021-12-19 18:42:54,088 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:54,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977722990] [2021-12-19 18:42:54,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:54,089 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:54,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:54,091 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:54,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:54,093 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:54,105 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:54,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-19 18:42:54,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-19 18:42:54,106 INFO L87 Difference]: Start difference. First operand 9733 states and 18067 transitions. cyclomatic complexity: 8369 Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:54,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:54,469 INFO L93 Difference]: Finished difference Result 21339 states and 39649 transitions. [2021-12-19 18:42:54,469 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-19 18:42:54,470 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21339 states and 39649 transitions. [2021-12-19 18:42:54,543 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8636 [2021-12-19 18:42:54,595 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21339 states to 21339 states and 39649 transitions. [2021-12-19 18:42:54,595 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21301 [2021-12-19 18:42:54,610 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21301 [2021-12-19 18:42:54,610 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21339 states and 39649 transitions. [2021-12-19 18:42:54,611 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:54,611 INFO L681 BuchiCegarLoop]: Abstraction has 21339 states and 39649 transitions. [2021-12-19 18:42:54,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21339 states and 39649 transitions. [2021-12-19 18:42:54,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21339 to 9727. [2021-12-19 18:42:54,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9727 states, 9727 states have (on average 1.8560707309550735) internal successors, (18054), 9726 states have internal predecessors, (18054), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:54,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9727 states to 9727 states and 18054 transitions. [2021-12-19 18:42:54,757 INFO L704 BuchiCegarLoop]: Abstraction has 9727 states and 18054 transitions. [2021-12-19 18:42:54,757 INFO L587 BuchiCegarLoop]: Abstraction has 9727 states and 18054 transitions. [2021-12-19 18:42:54,757 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-19 18:42:54,757 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9727 states and 18054 transitions. [2021-12-19 18:42:54,779 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:54,779 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:54,779 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:54,780 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:54,780 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:54,780 INFO L791 eck$LassoCheckResult]: Stem: 555604#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 553619#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 553620#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 555553#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 554763#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 551592#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 551593#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 554247#L564 assume !(0 == getOrigin_~person#1); 548226#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 548227#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 548810#L999 assume !(0 == initPersonOnFloor_~floor#1); 548811#L1026 assume !(1 == initPersonOnFloor_~floor#1); 554642#L1053 assume !(2 == initPersonOnFloor_~floor#1); 555139#L1080 assume 3 == initPersonOnFloor_~floor#1; 552322#L1081 assume !(0 == initPersonOnFloor_~person#1); 552323#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 550152#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 547012#L791 assume !(0 == callOnFloor_~floorID#1); 546854#L794 assume !(1 == callOnFloor_~floorID#1); 546807#L797 assume !(2 == callOnFloor_~floorID#1); 546808#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 548846#L803-2 assume { :end_inline_callOnFloor } true; 548847#L1143 assume { :end_inline_initPersonOnFloor } true; 555129#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 553920#L564-1 assume !(0 == getOrigin_~person#1); 549312#L568-1 assume !(1 == getOrigin_~person#1); 549313#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 555631#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 552726#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 552727#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 554120#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 554121#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 554761#L1057-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 552997#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 555889#L791-2 assume !(0 == callOnFloor_~floorID#1); 555888#L794-2 assume !(1 == callOnFloor_~floorID#1); 555887#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 548454#L803-5 assume { :end_inline_callOnFloor } true; 553969#L1143-1 assume { :end_inline_initPersonOnFloor } true; 549828#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 549829#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 547343#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 547344#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 547642#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 547643#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 551901#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 551706#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 551302#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 548209#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 547598#L2853 assume !(0 != timeShift_~tmp___9~2#1); 547600#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 548275#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 548276#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 548571#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 551364#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 547201#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 547202#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 546927#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 546732#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 546733#L2612 assume !(1 == ~currentHeading~0); 551211#L2622 assume !(0 == ~currentFloorID~0); 551212#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 551009#L2628-1 assume { :end_inline_continueInDirection } true; 546208#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 546209#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 548566#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 548568#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 550451#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 550001#L3226-2 [2021-12-19 18:42:54,780 INFO L793 eck$LassoCheckResult]: Loop: 550001#L3226-2 assume !false; 550769#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 550770#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 546450#L3235-2 assume !false; 546451#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 549882#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 550001#L3226-2 [2021-12-19 18:42:54,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:54,781 INFO L85 PathProgramCache]: Analyzing trace with hash -1018003050, now seen corresponding path program 1 times [2021-12-19 18:42:54,781 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:54,781 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036981200] [2021-12-19 18:42:54,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:54,781 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:54,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:54,807 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:54,807 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:54,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036981200] [2021-12-19 18:42:54,807 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036981200] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:54,807 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:54,807 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-19 18:42:54,808 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200185579] [2021-12-19 18:42:54,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:54,808 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:54,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:54,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 8 times [2021-12-19 18:42:54,808 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:54,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [762418432] [2021-12-19 18:42:54,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:54,809 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:54,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:54,811 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:54,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:54,813 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:54,825 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:54,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:42:54,826 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:42:54,826 INFO L87 Difference]: Start difference. First operand 9727 states and 18054 transitions. cyclomatic complexity: 8362 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:55,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:55,083 INFO L93 Difference]: Finished difference Result 13622 states and 25275 transitions. [2021-12-19 18:42:55,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:42:55,085 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13622 states and 25275 transitions. [2021-12-19 18:42:55,139 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4502 [2021-12-19 18:42:55,180 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13622 states to 13622 states and 25275 transitions. [2021-12-19 18:42:55,181 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13584 [2021-12-19 18:42:55,192 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13584 [2021-12-19 18:42:55,192 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13622 states and 25275 transitions. [2021-12-19 18:42:55,193 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:55,193 INFO L681 BuchiCegarLoop]: Abstraction has 13622 states and 25275 transitions. [2021-12-19 18:42:55,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13622 states and 25275 transitions. [2021-12-19 18:42:55,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13622 to 9727. [2021-12-19 18:42:55,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9727 states, 9727 states have (on average 1.8552482779891024) internal successors, (18046), 9726 states have internal predecessors, (18046), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:55,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9727 states to 9727 states and 18046 transitions. [2021-12-19 18:42:55,318 INFO L704 BuchiCegarLoop]: Abstraction has 9727 states and 18046 transitions. [2021-12-19 18:42:55,318 INFO L587 BuchiCegarLoop]: Abstraction has 9727 states and 18046 transitions. [2021-12-19 18:42:55,318 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-19 18:42:55,318 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9727 states and 18046 transitions. [2021-12-19 18:42:55,371 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:55,372 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:55,372 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:55,372 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:55,372 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:55,372 INFO L791 eck$LassoCheckResult]: Stem: 578963#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 576976#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 576977#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 578911#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 578119#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 574951#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 574952#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 577603#L564 assume !(0 == getOrigin_~person#1); 571583#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 571584#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 572172#L999 assume !(0 == initPersonOnFloor_~floor#1); 572173#L1026 assume !(1 == initPersonOnFloor_~floor#1); 577998#L1053 assume !(2 == initPersonOnFloor_~floor#1); 578496#L1080 assume 3 == initPersonOnFloor_~floor#1; 575681#L1081 assume !(0 == initPersonOnFloor_~person#1); 575682#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 573514#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 570370#L791 assume !(0 == callOnFloor_~floorID#1); 570212#L794 assume !(1 == callOnFloor_~floorID#1); 570168#L797 assume !(2 == callOnFloor_~floorID#1); 570169#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 572207#L803-2 assume { :end_inline_callOnFloor } true; 572208#L1143 assume { :end_inline_initPersonOnFloor } true; 578486#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 577277#L564-1 assume !(0 == getOrigin_~person#1); 572673#L568-1 assume !(1 == getOrigin_~person#1); 572674#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 578989#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 576086#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 576087#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 577479#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 577480#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 578117#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 576356#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 576357#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 579248#L791-2 assume !(0 == callOnFloor_~floorID#1); 579247#L794-2 assume !(1 == callOnFloor_~floorID#1); 579246#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 571812#L803-5 assume { :end_inline_callOnFloor } true; 577326#L1143-1 assume { :end_inline_initPersonOnFloor } true; 573188#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 573189#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 570700#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 570701#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 571002#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 571003#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 575260#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 575065#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 574662#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 571566#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 570959#L2853 assume !(0 != timeShift_~tmp___9~2#1); 570961#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 571633#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 571634#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 571937#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 574725#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 570558#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 570559#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 570285#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 570096#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 570097#L2612 assume !(1 == ~currentHeading~0); 574571#L2622 assume !(0 == ~currentFloorID~0); 574572#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 574369#L2628-1 assume { :end_inline_continueInDirection } true; 569567#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 569568#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 571925#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 571927#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 573811#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 573359#L3226-2 [2021-12-19 18:42:55,373 INFO L793 eck$LassoCheckResult]: Loop: 573359#L3226-2 assume !false; 574132#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 574133#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 569808#L3235-2 assume !false; 569809#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 573240#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 573359#L3226-2 [2021-12-19 18:42:55,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:55,373 INFO L85 PathProgramCache]: Analyzing trace with hash 1437608285, now seen corresponding path program 1 times [2021-12-19 18:42:55,373 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:55,373 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470043149] [2021-12-19 18:42:55,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:55,374 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:55,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:55,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:55,400 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:55,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470043149] [2021-12-19 18:42:55,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470043149] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:55,400 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:55,400 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-19 18:42:55,400 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398622467] [2021-12-19 18:42:55,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:55,401 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:55,401 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:55,401 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 9 times [2021-12-19 18:42:55,401 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:55,401 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382785119] [2021-12-19 18:42:55,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:55,401 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:55,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:55,404 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:55,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:55,406 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:55,417 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:55,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:42:55,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:42:55,418 INFO L87 Difference]: Start difference. First operand 9727 states and 18046 transitions. cyclomatic complexity: 8354 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:57,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:42:57,752 INFO L93 Difference]: Finished difference Result 17145 states and 31306 transitions. [2021-12-19 18:42:57,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-19 18:42:57,754 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17145 states and 31306 transitions. [2021-12-19 18:42:57,818 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4400 [2021-12-19 18:42:57,866 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17145 states to 17145 states and 31306 transitions. [2021-12-19 18:42:57,866 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17069 [2021-12-19 18:42:57,879 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17069 [2021-12-19 18:42:57,879 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17145 states and 31306 transitions. [2021-12-19 18:42:57,887 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:42:57,887 INFO L681 BuchiCegarLoop]: Abstraction has 17145 states and 31306 transitions. [2021-12-19 18:42:57,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17145 states and 31306 transitions. [2021-12-19 18:42:57,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17145 to 9727. [2021-12-19 18:42:58,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9727 states, 9727 states have (on average 1.8161817621054797) internal successors, (17666), 9726 states have internal predecessors, (17666), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:42:58,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9727 states to 9727 states and 17666 transitions. [2021-12-19 18:42:58,024 INFO L704 BuchiCegarLoop]: Abstraction has 9727 states and 17666 transitions. [2021-12-19 18:42:58,024 INFO L587 BuchiCegarLoop]: Abstraction has 9727 states and 17666 transitions. [2021-12-19 18:42:58,024 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-19 18:42:58,024 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9727 states and 17666 transitions. [2021-12-19 18:42:58,048 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2021-12-19 18:42:58,048 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:42:58,048 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:42:58,049 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:42:58,049 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:42:58,049 INFO L791 eck$LassoCheckResult]: Stem: 605843#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 603840#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 603841#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 605791#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 604995#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 601805#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 601806#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 604475#L564 assume !(0 == getOrigin_~person#1); 598444#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 598445#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 599023#L999 assume !(0 == initPersonOnFloor_~floor#1); 599024#L1026 assume !(1 == initPersonOnFloor_~floor#1); 604874#L1053 assume !(2 == initPersonOnFloor_~floor#1); 605373#L1080 assume 3 == initPersonOnFloor_~floor#1; 602536#L1081 assume !(0 == initPersonOnFloor_~person#1); 602537#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 600366#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 597238#L791 assume !(0 == callOnFloor_~floorID#1); 597083#L794 assume !(1 == callOnFloor_~floorID#1); 597036#L797 assume !(2 == callOnFloor_~floorID#1); 597037#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 599061#L803-2 assume { :end_inline_callOnFloor } true; 599062#L1143 assume { :end_inline_initPersonOnFloor } true; 605363#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 604147#L564-1 assume !(0 == getOrigin_~person#1); 599524#L568-1 assume !(1 == getOrigin_~person#1); 599525#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 605870#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 602943#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 602944#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 604347#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 604348#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 604993#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 603215#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 603216#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 606129#L791-2 assume !(0 == callOnFloor_~floorID#1); 606128#L794-2 assume !(1 == callOnFloor_~floorID#1); 606127#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 598670#L803-5 assume { :end_inline_callOnFloor } true; 604195#L1143-1 assume { :end_inline_initPersonOnFloor } true; 600038#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 600039#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 597565#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 597566#L728 assume !(0 == isFloorCalling_~floorID#1); 605688#L732 assume !(1 == isFloorCalling_~floorID#1); 605689#L736 assume !(2 == isFloorCalling_~floorID#1); 604833#L740 assume !(3 == isFloorCalling_~floorID#1); 604244#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 597863#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 597864#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 602115#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 601919#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 601514#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 598427#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 597821#L2853 assume !(0 != timeShift_~tmp___9~2#1); 597823#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 598493#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 598494#L728-3 assume !(0 == isFloorCalling_~floorID#1); 605799#L732-3 assume !(1 == isFloorCalling_~floorID#1); 598788#L736-3 assume !(2 == isFloorCalling_~floorID#1); 598789#L740-3 assume !(3 == isFloorCalling_~floorID#1); 600846#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 600847#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 601576#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 597424#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 597425#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 597156#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 596962#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 596963#L2612 assume !(1 == ~currentHeading~0); 601423#L2622 assume !(0 == ~currentFloorID~0); 601424#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 601221#L2628-1 assume { :end_inline_continueInDirection } true; 596448#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 596449#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 598780#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 598782#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 600663#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 600212#L3226-2 [2021-12-19 18:42:58,050 INFO L793 eck$LassoCheckResult]: Loop: 600212#L3226-2 assume !false; 600986#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 600987#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 596685#L3235-2 assume !false; 596686#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 600092#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 600212#L3226-2 [2021-12-19 18:42:58,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:58,050 INFO L85 PathProgramCache]: Analyzing trace with hash 526400329, now seen corresponding path program 1 times [2021-12-19 18:42:58,051 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:58,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260897340] [2021-12-19 18:42:58,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:58,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:58,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:42:58,097 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:42:58,097 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:42:58,097 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260897340] [2021-12-19 18:42:58,097 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260897340] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:42:58,097 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:42:58,097 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:42:58,097 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916886712] [2021-12-19 18:42:58,097 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:42:58,098 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:42:58,098 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:42:58,098 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 10 times [2021-12-19 18:42:58,098 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:42:58,098 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1789607946] [2021-12-19 18:42:58,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:42:58,098 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:42:58,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:58,101 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:42:58,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:42:58,103 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:42:58,113 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:42:58,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-19 18:42:58,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-19 18:42:58,114 INFO L87 Difference]: Start difference. First operand 9727 states and 17666 transitions. cyclomatic complexity: 7974 Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:03,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:43:03,991 INFO L93 Difference]: Finished difference Result 66291 states and 121399 transitions. [2021-12-19 18:43:03,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-19 18:43:03,993 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66291 states and 121399 transitions. [2021-12-19 18:43:04,269 INFO L131 ngComponentsAnalysis]: Automaton has 354 accepting balls. 15515 [2021-12-19 18:43:04,484 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66291 states to 66291 states and 121399 transitions. [2021-12-19 18:43:04,484 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65911 [2021-12-19 18:43:04,545 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65911 [2021-12-19 18:43:04,545 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66291 states and 121399 transitions. [2021-12-19 18:43:04,563 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:43:04,564 INFO L681 BuchiCegarLoop]: Abstraction has 66291 states and 121399 transitions. [2021-12-19 18:43:04,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66291 states and 121399 transitions. [2021-12-19 18:43:04,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66291 to 19298. [2021-12-19 18:43:05,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19298 states, 19298 states have (on average 1.8172349466265934) internal successors, (35069), 19297 states have internal predecessors, (35069), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:05,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19298 states to 19298 states and 35069 transitions. [2021-12-19 18:43:05,036 INFO L704 BuchiCegarLoop]: Abstraction has 19298 states and 35069 transitions. [2021-12-19 18:43:05,036 INFO L587 BuchiCegarLoop]: Abstraction has 19298 states and 35069 transitions. [2021-12-19 18:43:05,036 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-19 18:43:05,036 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19298 states and 35069 transitions. [2021-12-19 18:43:05,091 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4844 [2021-12-19 18:43:05,091 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:43:05,091 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:43:05,092 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:43:05,092 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:43:05,092 INFO L791 eck$LassoCheckResult]: Stem: 682121#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 679983#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 679984#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 682061#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 681198#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 677888#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 677889#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 680647#L564 assume !(0 == getOrigin_~person#1); 674491#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 674492#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 675072#L999 assume !(0 == initPersonOnFloor_~floor#1); 675073#L1026 assume !(1 == initPersonOnFloor_~floor#1); 681063#L1053 assume !(2 == initPersonOnFloor_~floor#1); 681600#L1080 assume 3 == initPersonOnFloor_~floor#1; 678637#L1081 assume !(0 == initPersonOnFloor_~person#1); 678638#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 676422#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 673283#L791 assume !(0 == callOnFloor_~floorID#1); 673128#L794 assume !(1 == callOnFloor_~floorID#1); 673081#L797 assume !(2 == callOnFloor_~floorID#1); 673082#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 678629#L803-2 assume { :end_inline_callOnFloor } true; 682590#L1143 assume { :end_inline_initPersonOnFloor } true; 682589#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 682588#L564-1 assume !(0 == getOrigin_~person#1); 682587#L568-1 assume !(1 == getOrigin_~person#1); 682586#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 682585#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 682584#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 682583#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 682582#L1053-1 assume !(2 == initPersonOnFloor_~floor#1); 682579#L1080-1 assume !(3 == initPersonOnFloor_~floor#1); 682573#L1107-2 assume !(4 == initPersonOnFloor_~floor#1); 682564#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 682559#L791-2 assume !(0 == callOnFloor_~floorID#1); 682557#L794-2 assume !(1 == callOnFloor_~floorID#1); 682555#L797-2 assume !(2 == callOnFloor_~floorID#1); 682553#L800-2 assume !(3 == callOnFloor_~floorID#1); 682551#L803-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 674719#L803-5 assume { :end_inline_callOnFloor } true; 680348#L1143-1 assume { :end_inline_initPersonOnFloor } true; 676094#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 676095#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 678684#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 682546#L728 assume !(0 == isFloorCalling_~floorID#1); 682544#L732 assume !(1 == isFloorCalling_~floorID#1); 682542#L736 assume !(2 == isFloorCalling_~floorID#1); 682540#L740 assume !(3 == isFloorCalling_~floorID#1); 682538#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 682536#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 682534#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 682531#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 678006#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 677594#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 674474#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 673867#L2853 assume !(0 != timeShift_~tmp___9~2#1); 673869#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 674540#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 674541#L728-3 assume !(0 == isFloorCalling_~floorID#1); 682070#L732-3 assume !(1 == isFloorCalling_~floorID#1); 674834#L736-3 assume !(2 == isFloorCalling_~floorID#1); 674835#L740-3 assume !(3 == isFloorCalling_~floorID#1); 676916#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 676917#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 677656#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 673469#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 673470#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 673201#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 673007#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 673008#L2612 assume !(1 == ~currentHeading~0); 677499#L2622 assume !(0 == ~currentFloorID~0); 677500#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 677295#L2628-1 assume { :end_inline_continueInDirection } true; 672493#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 672494#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 674829#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 674831#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 688931#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 688928#L3226-2 [2021-12-19 18:43:05,093 INFO L793 eck$LassoCheckResult]: Loop: 688928#L3226-2 assume !false; 688926#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 688924#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 688923#L3235-2 assume !false; 688921#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 688922#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 688928#L3226-2 [2021-12-19 18:43:05,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:05,093 INFO L85 PathProgramCache]: Analyzing trace with hash 1873642235, now seen corresponding path program 1 times [2021-12-19 18:43:05,093 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:05,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [281791558] [2021-12-19 18:43:05,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:05,094 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:05,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:43:05,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:43:05,117 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:43:05,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [281791558] [2021-12-19 18:43:05,131 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [281791558] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:43:05,131 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:43:05,131 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-19 18:43:05,132 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [298253416] [2021-12-19 18:43:05,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:43:05,132 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:43:05,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:05,132 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 11 times [2021-12-19 18:43:05,132 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:05,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1405921378] [2021-12-19 18:43:05,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:05,132 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:05,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:05,136 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:43:05,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:05,138 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:43:05,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:43:05,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-19 18:43:05,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-19 18:43:05,164 INFO L87 Difference]: Start difference. First operand 19298 states and 35069 transitions. cyclomatic complexity: 15841 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:05,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:43:05,442 INFO L93 Difference]: Finished difference Result 34586 states and 62899 transitions. [2021-12-19 18:43:05,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-19 18:43:05,443 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34586 states and 62899 transitions. [2021-12-19 18:43:05,590 INFO L131 ngComponentsAnalysis]: Automaton has 102 accepting balls. 13060 [2021-12-19 18:43:05,699 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34586 states to 34586 states and 62899 transitions. [2021-12-19 18:43:05,699 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34510 [2021-12-19 18:43:05,729 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34510 [2021-12-19 18:43:05,729 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34586 states and 62899 transitions. [2021-12-19 18:43:05,735 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:43:05,736 INFO L681 BuchiCegarLoop]: Abstraction has 34586 states and 62899 transitions. [2021-12-19 18:43:05,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34586 states and 62899 transitions. [2021-12-19 18:43:05,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34586 to 19270. [2021-12-19 18:43:06,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19270 states, 19270 states have (on average 1.8172807472755579) internal successors, (35019), 19269 states have internal predecessors, (35019), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:06,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19270 states to 19270 states and 35019 transitions. [2021-12-19 18:43:06,054 INFO L704 BuchiCegarLoop]: Abstraction has 19270 states and 35019 transitions. [2021-12-19 18:43:06,054 INFO L587 BuchiCegarLoop]: Abstraction has 19270 states and 35019 transitions. [2021-12-19 18:43:06,054 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-19 18:43:06,055 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19270 states and 35019 transitions. [2021-12-19 18:43:06,115 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4844 [2021-12-19 18:43:06,116 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:43:06,116 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:43:06,116 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:43:06,117 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:43:06,118 INFO L791 eck$LassoCheckResult]: Stem: 736198#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 733957#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 733958#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 736127#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 735210#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 731820#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 731821#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 734655#L564 assume !(0 == getOrigin_~person#1); 728393#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 728394#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 728983#L999 assume !(0 == initPersonOnFloor_~floor#1); 728984#L1026 assume !(1 == initPersonOnFloor_~floor#1); 735077#L1053 assume !(2 == initPersonOnFloor_~floor#1); 735638#L1080 assume 3 == initPersonOnFloor_~floor#1; 732574#L1081 assume !(0 == initPersonOnFloor_~person#1); 732575#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 730350#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 727178#L791 assume !(0 == callOnFloor_~floorID#1); 727023#L794 assume !(1 == callOnFloor_~floorID#1); 726976#L797 assume !(2 == callOnFloor_~floorID#1); 726977#L800 assume !(3 == callOnFloor_~floorID#1); 732568#L803 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 735379#L803-2 assume { :end_inline_callOnFloor } true; 735621#L1143 assume { :end_inline_initPersonOnFloor } true; 735622#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 734294#L564-1 assume !(0 == getOrigin_~person#1); 734295#L568-1 assume !(1 == getOrigin_~person#1); 740306#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 740305#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 732998#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 732999#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 734516#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 734517#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 735207#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 733283#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 732467#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 732468#L791-2 assume !(0 == callOnFloor_~floorID#1); 737587#L794-2 assume !(1 == callOnFloor_~floorID#1); 737584#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 730595#L803-5 assume { :end_inline_callOnFloor } true; 737580#L1143-1 assume { :end_inline_initPersonOnFloor } true; 737570#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 736928#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 736927#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 736926#L728 assume !(0 == isFloorCalling_~floorID#1); 736729#L732 assume !(1 == isFloorCalling_~floorID#1); 736722#L736 assume !(2 == isFloorCalling_~floorID#1); 736707#L740 assume !(3 == isFloorCalling_~floorID#1); 736705#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 736703#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 736701#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 736698#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 731938#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 731527#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 730449#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 738659#L2853 assume !(0 != timeShift_~tmp___9~2#1); 738653#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 738652#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 738651#L728-3 assume !(0 == isFloorCalling_~floorID#1); 738650#L732-3 assume !(1 == isFloorCalling_~floorID#1); 738649#L736-3 assume !(2 == isFloorCalling_~floorID#1); 738648#L740-3 assume !(3 == isFloorCalling_~floorID#1); 738647#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 738646#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 738645#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 738609#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 738604#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 738603#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 738601#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 738600#L2612 assume !(1 == ~currentHeading~0); 738592#L2622 assume !(0 == ~currentFloorID~0); 738591#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 738590#L2628-1 assume { :end_inline_continueInDirection } true; 738587#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 738547#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 728732#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 728734#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 730655#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 730195#L3226-2 [2021-12-19 18:43:06,118 INFO L793 eck$LassoCheckResult]: Loop: 730195#L3226-2 assume !false; 735940#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 738567#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 738572#L3235-2 assume !false; 738571#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 730194#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 730195#L3226-2 [2021-12-19 18:43:06,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:06,118 INFO L85 PathProgramCache]: Analyzing trace with hash 1651041609, now seen corresponding path program 1 times [2021-12-19 18:43:06,119 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:06,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [93913752] [2021-12-19 18:43:06,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:06,119 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:06,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:43:06,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:43:06,149 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:43:06,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [93913752] [2021-12-19 18:43:06,150 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [93913752] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:43:06,150 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:43:06,150 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:43:06,150 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [791505591] [2021-12-19 18:43:06,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:43:06,151 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:43:06,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:06,151 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 12 times [2021-12-19 18:43:06,151 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:06,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1944614504] [2021-12-19 18:43:06,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:06,152 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:06,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:06,155 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:43:06,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:06,157 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:43:06,170 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:43:06,170 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-19 18:43:06,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-19 18:43:06,171 INFO L87 Difference]: Start difference. First operand 19270 states and 35019 transitions. cyclomatic complexity: 15819 Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:06,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:43:06,720 INFO L93 Difference]: Finished difference Result 47947 states and 87211 transitions. [2021-12-19 18:43:06,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-19 18:43:06,721 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47947 states and 87211 transitions. [2021-12-19 18:43:06,921 INFO L131 ngComponentsAnalysis]: Automaton has 144 accepting balls. 17536 [2021-12-19 18:43:07,063 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47947 states to 47947 states and 87211 transitions. [2021-12-19 18:43:07,064 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47833 [2021-12-19 18:43:07,105 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47833 [2021-12-19 18:43:07,106 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47947 states and 87211 transitions. [2021-12-19 18:43:07,113 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:43:07,114 INFO L681 BuchiCegarLoop]: Abstraction has 47947 states and 87211 transitions. [2021-12-19 18:43:07,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47947 states and 87211 transitions. [2021-12-19 18:43:07,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47947 to 19257. [2021-12-19 18:43:07,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19257 states, 19257 states have (on average 1.817365113984525) internal successors, (34997), 19256 states have internal predecessors, (34997), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:07,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19257 states to 19257 states and 34997 transitions. [2021-12-19 18:43:07,459 INFO L704 BuchiCegarLoop]: Abstraction has 19257 states and 34997 transitions. [2021-12-19 18:43:07,459 INFO L587 BuchiCegarLoop]: Abstraction has 19257 states and 34997 transitions. [2021-12-19 18:43:07,459 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-19 18:43:07,460 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19257 states and 34997 transitions. [2021-12-19 18:43:07,510 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4844 [2021-12-19 18:43:07,511 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:43:07,511 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:43:07,511 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:43:07,511 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:43:07,512 INFO L791 eck$LassoCheckResult]: Stem: 803054#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 801021#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 801022#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 802999#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 802189#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 798977#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 798978#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 801662#L564 assume !(0 == getOrigin_~person#1); 795616#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 795617#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 796197#L999 assume !(0 == initPersonOnFloor_~floor#1); 796198#L1026 assume !(1 == initPersonOnFloor_~floor#1); 802066#L1053 assume !(2 == initPersonOnFloor_~floor#1); 802573#L1080 assume 3 == initPersonOnFloor_~floor#1; 799714#L1081 assume !(0 == initPersonOnFloor_~person#1); 799715#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 797538#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 794410#L791 assume !(0 == callOnFloor_~floorID#1); 794255#L794 assume !(1 == callOnFloor_~floorID#1); 794208#L797 assume !(2 == callOnFloor_~floorID#1); 794209#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 796233#L803-2 assume { :end_inline_callOnFloor } true; 796234#L1143 assume { :end_inline_initPersonOnFloor } true; 802563#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 801330#L564-1 assume !(0 == getOrigin_~person#1); 796700#L568-1 assume !(1 == getOrigin_~person#1); 796701#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 803084#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 800121#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 800122#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 801533#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 801534#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 802187#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 800394#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 799613#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 799614#L791-2 assume !(0 == callOnFloor_~floorID#1); 802879#L794-2 assume !(1 == callOnFloor_~floorID#1); 802880#L797-2 assume !(2 == callOnFloor_~floorID#1); 795842#L800-2 assume !(3 == callOnFloor_~floorID#1); 795844#L803-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 797779#L803-5 assume { :end_inline_callOnFloor } true; 803507#L1143-1 assume { :end_inline_initPersonOnFloor } true; 803505#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 803503#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 803501#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 803499#L728 assume !(0 == isFloorCalling_~floorID#1); 803497#L732 assume !(1 == isFloorCalling_~floorID#1); 803402#L736 assume !(2 == isFloorCalling_~floorID#1); 803395#L740 assume !(3 == isFloorCalling_~floorID#1); 803380#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 803378#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 803376#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 803373#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 799094#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 798687#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 797635#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 805399#L2853 assume !(0 != timeShift_~tmp___9~2#1); 805400#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 805842#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 805841#L728-3 assume !(0 == isFloorCalling_~floorID#1); 805840#L732-3 assume !(1 == isFloorCalling_~floorID#1); 805839#L736-3 assume !(2 == isFloorCalling_~floorID#1); 805838#L740-3 assume !(3 == isFloorCalling_~floorID#1); 805837#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 805836#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 805835#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 805834#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 804782#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 804781#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 804779#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 804778#L2612 assume !(1 == ~currentHeading~0); 804775#L2622 assume !(0 == ~currentFloorID~0); 804769#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 804768#L2628-1 assume { :end_inline_continueInDirection } true; 804763#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 804660#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 804661#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 804764#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 806557#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 806558#L3226-2 [2021-12-19 18:43:07,512 INFO L793 eck$LassoCheckResult]: Loop: 806558#L3226-2 assume !false; 806555#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 806556#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 806568#L3235-2 assume !false; 806565#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 806563#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 806558#L3226-2 [2021-12-19 18:43:07,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:07,512 INFO L85 PathProgramCache]: Analyzing trace with hash 1211647684, now seen corresponding path program 1 times [2021-12-19 18:43:07,513 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:07,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576041747] [2021-12-19 18:43:07,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:07,513 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:07,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:43:07,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:43:07,542 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:43:07,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576041747] [2021-12-19 18:43:07,542 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576041747] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:43:07,542 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:43:07,542 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:43:07,542 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1471775045] [2021-12-19 18:43:07,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:43:07,543 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:43:07,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:07,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 13 times [2021-12-19 18:43:07,543 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:07,543 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609439475] [2021-12-19 18:43:07,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:07,544 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:07,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:07,546 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:43:07,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:07,548 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:43:07,559 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:43:07,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-19 18:43:07,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-19 18:43:07,560 INFO L87 Difference]: Start difference. First operand 19257 states and 34997 transitions. cyclomatic complexity: 15810 Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 5 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:07,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:43:07,836 INFO L93 Difference]: Finished difference Result 21035 states and 38250 transitions. [2021-12-19 18:43:07,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-19 18:43:07,837 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21035 states and 38250 transitions. [2021-12-19 18:43:07,919 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8558 [2021-12-19 18:43:07,977 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21035 states to 21035 states and 38250 transitions. [2021-12-19 18:43:07,978 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20997 [2021-12-19 18:43:07,995 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20997 [2021-12-19 18:43:07,995 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21035 states and 38250 transitions. [2021-12-19 18:43:08,006 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:43:08,006 INFO L681 BuchiCegarLoop]: Abstraction has 21035 states and 38250 transitions. [2021-12-19 18:43:08,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21035 states and 38250 transitions. [2021-12-19 18:43:08,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21035 to 13433. [2021-12-19 18:43:08,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13433 states, 13433 states have (on average 1.8172411226085015) internal successors, (24411), 13432 states have internal predecessors, (24411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:08,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13433 states to 13433 states and 24411 transitions. [2021-12-19 18:43:08,179 INFO L704 BuchiCegarLoop]: Abstraction has 13433 states and 24411 transitions. [2021-12-19 18:43:08,179 INFO L587 BuchiCegarLoop]: Abstraction has 13433 states and 24411 transitions. [2021-12-19 18:43:08,179 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-19 18:43:08,179 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13433 states and 24411 transitions. [2021-12-19 18:43:08,210 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4476 [2021-12-19 18:43:08,211 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:43:08,211 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:43:08,211 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:43:08,216 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:43:08,216 INFO L791 eck$LassoCheckResult]: Stem: 843230#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 841241#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 841242#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 843178#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 842393#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 839224#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 839225#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 841876#L564 assume !(0 == getOrigin_~person#1); 835907#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 835908#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 836477#L999 assume !(0 == initPersonOnFloor_~floor#1); 836478#L1026 assume !(1 == initPersonOnFloor_~floor#1); 842273#L1053 assume !(2 == initPersonOnFloor_~floor#1); 842763#L1080 assume 3 == initPersonOnFloor_~floor#1; 839947#L1081 assume !(0 == initPersonOnFloor_~person#1); 839948#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 837802#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 834713#L791 assume !(0 == callOnFloor_~floorID#1); 834558#L794 assume !(1 == callOnFloor_~floorID#1); 834511#L797 assume !(2 == callOnFloor_~floorID#1); 834512#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 836515#L803-2 assume { :end_inline_callOnFloor } true; 836516#L1143 assume { :end_inline_initPersonOnFloor } true; 842754#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 841547#L564-1 assume !(0 == getOrigin_~person#1); 836973#L568-1 assume !(1 == getOrigin_~person#1); 836974#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 843257#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 840345#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 840346#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 841748#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 841749#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 842391#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 840615#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 839849#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 839850#L791-2 assume !(0 == callOnFloor_~floorID#1); 843061#L794-2 assume !(1 == callOnFloor_~floorID#1); 843062#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 843146#L803-5 assume { :end_inline_callOnFloor } true; 841595#L1143-1 assume { :end_inline_initPersonOnFloor } true; 837476#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 837477#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 835038#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 835039#L728 assume !(0 == isFloorCalling_~floorID#1); 843075#L732 assume !(1 == isFloorCalling_~floorID#1); 843076#L736 assume !(2 == isFloorCalling_~floorID#1); 842232#L740 assume !(3 == isFloorCalling_~floorID#1); 841644#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 835336#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 835337#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 839527#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 841419#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 841684#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 841685#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 839047#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 839048#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 835890#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 835294#L2853 assume !(0 != timeShift_~tmp___9~2#1); 835296#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 835956#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 835957#L728-3 assume !(0 == isFloorCalling_~floorID#1); 843186#L732-3 assume !(1 == isFloorCalling_~floorID#1); 836242#L736-3 assume !(2 == isFloorCalling_~floorID#1); 836243#L740-3 assume !(3 == isFloorCalling_~floorID#1); 838273#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 838274#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 838997#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 834897#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 834898#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 834631#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 834437#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 834438#L2612 assume !(1 == ~currentHeading~0); 838847#L2622 assume !(0 == ~currentFloorID~0); 838848#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 838645#L2628-1 assume { :end_inline_continueInDirection } true; 833925#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 833926#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 836234#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 836236#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 838093#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 837649#L3226-2 [2021-12-19 18:43:08,216 INFO L793 eck$LassoCheckResult]: Loop: 837649#L3226-2 assume !false; 838410#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 838411#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 834162#L3235-2 assume !false; 834163#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 837530#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 837649#L3226-2 [2021-12-19 18:43:08,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:08,217 INFO L85 PathProgramCache]: Analyzing trace with hash 463883413, now seen corresponding path program 1 times [2021-12-19 18:43:08,217 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:08,217 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [366254226] [2021-12-19 18:43:08,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:08,217 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:08,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:43:08,256 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:43:08,257 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:43:08,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [366254226] [2021-12-19 18:43:08,257 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [366254226] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:43:08,257 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:43:08,257 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-19 18:43:08,257 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25297063] [2021-12-19 18:43:08,257 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:43:08,258 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:43:08,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:08,258 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 14 times [2021-12-19 18:43:08,258 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:08,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [987304355] [2021-12-19 18:43:08,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:08,258 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:08,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:08,261 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:43:08,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:08,263 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:43:08,274 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:43:08,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-19 18:43:08,275 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-19 18:43:08,275 INFO L87 Difference]: Start difference. First operand 13433 states and 24411 transitions. cyclomatic complexity: 11022 Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 5 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:11,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:43:11,089 INFO L93 Difference]: Finished difference Result 43253 states and 79191 transitions. [2021-12-19 18:43:11,090 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-19 18:43:11,090 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 43253 states and 79191 transitions. [2021-12-19 18:43:11,282 INFO L131 ngComponentsAnalysis]: Automaton has 227 accepting balls. 14598 [2021-12-19 18:43:11,416 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 43253 states to 43253 states and 79191 transitions. [2021-12-19 18:43:11,416 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43101 [2021-12-19 18:43:11,458 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43101 [2021-12-19 18:43:11,458 INFO L73 IsDeterministic]: Start isDeterministic. Operand 43253 states and 79191 transitions. [2021-12-19 18:43:11,488 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:43:11,488 INFO L681 BuchiCegarLoop]: Abstraction has 43253 states and 79191 transitions. [2021-12-19 18:43:11,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43253 states and 79191 transitions. [2021-12-19 18:43:11,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43253 to 13423. [2021-12-19 18:43:11,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13423 states, 13423 states have (on average 1.8171049690829173) internal successors, (24391), 13422 states have internal predecessors, (24391), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:11,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13423 states to 13423 states and 24391 transitions. [2021-12-19 18:43:11,763 INFO L704 BuchiCegarLoop]: Abstraction has 13423 states and 24391 transitions. [2021-12-19 18:43:11,763 INFO L587 BuchiCegarLoop]: Abstraction has 13423 states and 24391 transitions. [2021-12-19 18:43:11,764 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-12-19 18:43:11,764 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13423 states and 24391 transitions. [2021-12-19 18:43:11,795 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4474 [2021-12-19 18:43:11,795 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:43:11,795 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:43:11,796 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:43:11,796 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:43:11,797 INFO L791 eck$LassoCheckResult]: Stem: 900302#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 898105#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 898106#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 900237#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 899338#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 895995#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 895996#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 898788#L564 assume !(0 == getOrigin_~person#1); 892625#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 892626#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 893202#L999 assume !(0 == initPersonOnFloor_~floor#1); 893203#L1026 assume !(1 == initPersonOnFloor_~floor#1); 899210#L1053 assume !(2 == initPersonOnFloor_~floor#1); 899757#L1080 assume 3 == initPersonOnFloor_~floor#1; 896749#L1081 assume !(0 == initPersonOnFloor_~person#1); 896750#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 894541#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891428#L791 assume !(0 == callOnFloor_~floorID#1); 891273#L794 assume !(1 == callOnFloor_~floorID#1); 891226#L797 assume !(2 == callOnFloor_~floorID#1); 891227#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 893237#L803-2 assume { :end_inline_callOnFloor } true; 893238#L1143 assume { :end_inline_initPersonOnFloor } true; 899747#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 898428#L564-1 assume !(0 == getOrigin_~person#1); 893696#L568-1 assume !(1 == getOrigin_~person#1); 893697#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 900335#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 897168#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 897169#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 898646#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 898647#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 899336#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 897449#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 896644#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 896645#L791-2 assume !(0 == callOnFloor_~floorID#1); 900103#L794-2 assume !(1 == callOnFloor_~floorID#1); 900104#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 900199#L803-5 assume { :end_inline_callOnFloor } true; 898479#L1143-1 assume { :end_inline_initPersonOnFloor } true; 894208#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 894209#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 891752#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 891753#L728 assume !(0 == isFloorCalling_~floorID#1); 900122#L732 assume !(1 == isFloorCalling_~floorID#1); 900123#L736 assume !(2 == isFloorCalling_~floorID#1); 899169#L740 assume !(3 == isFloorCalling_~floorID#1); 898530#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 892053#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 892054#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 896307#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 898291#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 898573#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 898574#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 895813#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 895814#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 892608#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 892008#L2853 assume !(0 != timeShift_~tmp___9~2#1); 892010#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 892674#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 892675#L728-3 assume !(0 == isFloorCalling_~floorID#1); 900248#L732-3 assume !(1 == isFloorCalling_~floorID#1); 892964#L736-3 assume !(2 == isFloorCalling_~floorID#1); 892965#L740-3 assume !(3 == isFloorCalling_~floorID#1); 895020#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 895021#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 895764#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 891612#L2555 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret70#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret71#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 891613#L2577 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 891758#L2598 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1; 896958#L2521 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_#t~ret59#1, stopRequestedInDirection__wrappee__empty_#t~ret60#1, stopRequestedInDirection__wrappee__empty_#t~ret61#1, stopRequestedInDirection__wrappee__empty_#t~ret62#1, stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~18#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~3#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 899568#L2167-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 894006#L2336-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 890860#L2489-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 891565#L2539 stopRequestedInDirection_#t~ret75#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 891346#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 891158#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 891159#L2612 assume !(1 == ~currentHeading~0); 895610#L2622 assume !(0 == ~currentFloorID~0); 895611#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 895403#L2628-1 assume { :end_inline_continueInDirection } true; 890642#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 890643#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 892953#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 892955#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 894834#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 894384#L3226-2 [2021-12-19 18:43:11,797 INFO L793 eck$LassoCheckResult]: Loop: 894384#L3226-2 assume !false; 895159#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 895160#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 890878#L3235-2 assume !false; 890879#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 894263#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 894384#L3226-2 [2021-12-19 18:43:11,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:11,797 INFO L85 PathProgramCache]: Analyzing trace with hash 816407335, now seen corresponding path program 1 times [2021-12-19 18:43:11,797 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:11,798 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360373937] [2021-12-19 18:43:11,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:11,798 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:11,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:43:11,825 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:43:11,825 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:43:11,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1360373937] [2021-12-19 18:43:11,826 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1360373937] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:43:11,826 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:43:11,826 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-19 18:43:11,826 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297060334] [2021-12-19 18:43:11,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:43:11,826 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:43:11,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:11,827 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 15 times [2021-12-19 18:43:11,827 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:11,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448759768] [2021-12-19 18:43:11,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:11,827 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:11,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:11,829 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:43:11,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:11,831 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:43:11,844 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:43:11,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-19 18:43:11,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-19 18:43:11,844 INFO L87 Difference]: Start difference. First operand 13423 states and 24391 transitions. cyclomatic complexity: 11012 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:12,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-19 18:43:12,344 INFO L93 Difference]: Finished difference Result 25542 states and 46298 transitions. [2021-12-19 18:43:12,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-19 18:43:12,344 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25542 states and 46298 transitions. [2021-12-19 18:43:12,450 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8826 [2021-12-19 18:43:12,532 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25542 states to 25542 states and 46298 transitions. [2021-12-19 18:43:12,532 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25468 [2021-12-19 18:43:12,554 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25468 [2021-12-19 18:43:12,554 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25542 states and 46298 transitions. [2021-12-19 18:43:12,565 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-19 18:43:12,565 INFO L681 BuchiCegarLoop]: Abstraction has 25542 states and 46298 transitions. [2021-12-19 18:43:12,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25542 states and 46298 transitions. [2021-12-19 18:43:12,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25542 to 25540. [2021-12-19 18:43:12,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25540 states, 25540 states have (on average 1.8126859827721222) internal successors, (46296), 25539 states have internal predecessors, (46296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-19 18:43:12,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25540 states to 25540 states and 46296 transitions. [2021-12-19 18:43:12,884 INFO L704 BuchiCegarLoop]: Abstraction has 25540 states and 46296 transitions. [2021-12-19 18:43:12,885 INFO L587 BuchiCegarLoop]: Abstraction has 25540 states and 46296 transitions. [2021-12-19 18:43:12,885 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-12-19 18:43:12,885 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25540 states and 46296 transitions. [2021-12-19 18:43:12,963 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8826 [2021-12-19 18:43:12,963 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-19 18:43:12,963 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-19 18:43:12,965 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-19 18:43:12,965 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-19 18:43:12,965 INFO L791 eck$LassoCheckResult]: Stem: 939116#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 937009#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 937010#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 939062#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 938213#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 934954#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 934955#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 937668#L564 assume !(0 == getOrigin_~person#1); 931599#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 931600#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 932174#L999 assume !(0 == initPersonOnFloor_~floor#1); 932175#L1026 assume !(1 == initPersonOnFloor_~floor#1); 938087#L1053 assume !(2 == initPersonOnFloor_~floor#1); 938611#L1080 assume 3 == initPersonOnFloor_~floor#1; 935686#L1081 assume !(0 == initPersonOnFloor_~person#1); 935687#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 933504#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 930398#L791 assume !(0 == callOnFloor_~floorID#1); 930243#L794 assume !(1 == callOnFloor_~floorID#1); 930196#L797 assume !(2 == callOnFloor_~floorID#1); 930197#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 932211#L803-2 assume { :end_inline_callOnFloor } true; 932212#L1143 assume { :end_inline_initPersonOnFloor } true; 938602#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 937324#L564-1 assume !(0 == getOrigin_~person#1); 932671#L568-1 assume !(1 == getOrigin_~person#1); 932672#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 939151#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 936093#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 936094#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 937532#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 937533#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 938211#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 936369#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 935583#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 935584#L791-2 assume !(0 == callOnFloor_~floorID#1); 938935#L794-2 assume !(1 == callOnFloor_~floorID#1); 938936#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 939028#L803-5 assume { :end_inline_callOnFloor } true; 937374#L1143-1 assume { :end_inline_initPersonOnFloor } true; 933177#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 933178#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 930722#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 930723#L728 assume !(0 == isFloorCalling_~floorID#1); 938950#L732 assume !(1 == isFloorCalling_~floorID#1); 938951#L736 assume !(2 == isFloorCalling_~floorID#1); 938045#L740 assume !(3 == isFloorCalling_~floorID#1); 937429#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 931019#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 931020#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 935258#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 937191#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 937469#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 937470#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 934770#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 934771#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 931582#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 930977#L2853 assume !(0 != timeShift_~tmp___9~2#1); 930979#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 931649#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 931650#L728-3 assume !(0 == isFloorCalling_~floorID#1); 939070#L732-3 assume !(1 == isFloorCalling_~floorID#1); 931939#L736-3 assume !(2 == isFloorCalling_~floorID#1); 931940#L740-3 assume !(3 == isFloorCalling_~floorID#1); 933981#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 933982#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 934720#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 930582#L2555 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret70#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret71#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 930583#L2577 assume !(0 != ~floorButtons_0~0); 935368#L2581 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 930728#L2598 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1; 935888#L2521 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_#t~ret59#1, stopRequestedInDirection__wrappee__empty_#t~ret60#1, stopRequestedInDirection__wrappee__empty_#t~ret61#1, stopRequestedInDirection__wrappee__empty_#t~ret62#1, stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~18#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~3#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 938426#L2167-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 932977#L2336-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 929824#L2489-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 930535#L2539 stopRequestedInDirection_#t~ret75#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 930316#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 930121#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 930122#L2612 assume !(1 == ~currentHeading~0); 934569#L2622 assume !(0 == ~currentFloorID~0); 934570#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 934366#L2628-1 assume { :end_inline_continueInDirection } true; 929613#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 929614#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 931931#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 931933#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 933799#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 933350#L3226-2 [2021-12-19 18:43:12,966 INFO L793 eck$LassoCheckResult]: Loop: 933350#L3226-2 assume !false; 934121#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 934122#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 929847#L3235-2 assume !false; 929848#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 933231#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 933350#L3226-2 [2021-12-19 18:43:12,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:12,966 INFO L85 PathProgramCache]: Analyzing trace with hash 1916430556, now seen corresponding path program 1 times [2021-12-19 18:43:12,966 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:12,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [616888962] [2021-12-19 18:43:12,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:12,967 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:12,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-19 18:43:12,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-19 18:43:12,996 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-19 18:43:12,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [616888962] [2021-12-19 18:43:12,996 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [616888962] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-19 18:43:12,996 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-19 18:43:12,996 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-19 18:43:12,996 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2030205775] [2021-12-19 18:43:12,997 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-19 18:43:12,997 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-19 18:43:12,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-19 18:43:12,997 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 16 times [2021-12-19 18:43:12,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-19 18:43:12,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720716811] [2021-12-19 18:43:12,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-19 18:43:12,998 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-19 18:43:13,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:13,000 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-19 18:43:13,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-19 18:43:13,003 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-19 18:43:13,015 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-19 18:43:13,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-19 18:43:13,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-19 18:43:13,016 INFO L87 Difference]: Start difference. First operand 25540 states and 46296 transitions. cyclomatic complexity: 20842 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 2 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)