./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 63ce65fdf446745f64534f105010543d07f1d807cf17249eadefb49fdfafb832 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 22:23:39,484 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 22:23:39,486 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 22:23:39,518 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 22:23:39,519 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 22:23:39,520 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 22:23:39,521 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 22:23:39,522 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 22:23:39,524 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 22:23:39,525 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 22:23:39,525 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 22:23:39,526 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 22:23:39,527 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 22:23:39,528 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 22:23:39,529 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 22:23:39,529 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 22:23:39,530 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 22:23:39,531 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 22:23:39,532 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 22:23:39,534 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 22:23:39,535 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 22:23:39,537 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 22:23:39,538 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 22:23:39,538 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 22:23:39,541 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 22:23:39,541 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 22:23:39,542 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 22:23:39,542 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 22:23:39,543 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 22:23:39,544 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 22:23:39,544 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 22:23:39,545 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 22:23:39,545 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 22:23:39,546 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 22:23:39,547 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 22:23:39,547 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 22:23:39,548 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 22:23:39,548 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 22:23:39,548 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 22:23:39,549 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 22:23:39,550 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 22:23:39,554 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-21 22:23:39,581 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 22:23:39,581 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 22:23:39,582 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 22:23:39,582 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 22:23:39,583 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 22:23:39,583 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 22:23:39,583 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 22:23:39,584 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-21 22:23:39,584 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-21 22:23:39,584 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-21 22:23:39,585 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-21 22:23:39,585 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-21 22:23:39,585 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-21 22:23:39,585 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 22:23:39,586 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 22:23:39,586 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-21 22:23:39,586 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 22:23:39,586 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 22:23:39,586 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 22:23:39,587 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-21 22:23:39,587 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-21 22:23:39,587 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-21 22:23:39,587 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 22:23:39,587 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 22:23:39,588 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-21 22:23:39,588 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 22:23:39,588 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-21 22:23:39,588 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 22:23:39,588 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 22:23:39,589 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 22:23:39,589 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 22:23:39,589 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 22:23:39,590 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-21 22:23:39,590 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 63ce65fdf446745f64534f105010543d07f1d807cf17249eadefb49fdfafb832 [2021-12-21 22:23:39,783 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 22:23:39,799 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 22:23:39,801 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 22:23:39,802 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 22:23:39,802 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 22:23:39,803 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c [2021-12-21 22:23:39,849 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/72d0c3948/5d8630a1510346c89e62ce52c97eeb39/FLAG94be13372 [2021-12-21 22:23:40,393 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 22:23:40,409 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c [2021-12-21 22:23:40,435 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/72d0c3948/5d8630a1510346c89e62ce52c97eeb39/FLAG94be13372 [2021-12-21 22:23:40,825 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/72d0c3948/5d8630a1510346c89e62ce52c97eeb39 [2021-12-21 22:23:40,827 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 22:23:40,828 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 22:23:40,829 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 22:23:40,829 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 22:23:40,834 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 22:23:40,834 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 10:23:40" (1/1) ... [2021-12-21 22:23:40,835 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39b0b2a8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:40, skipping insertion in model container [2021-12-21 22:23:40,835 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 10:23:40" (1/1) ... [2021-12-21 22:23:40,841 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 22:23:40,904 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 22:23:41,169 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c[54440,54453] [2021-12-21 22:23:41,216 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 22:23:41,224 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 22:23:41,328 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c[54440,54453] [2021-12-21 22:23:41,357 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 22:23:41,388 INFO L208 MainTranslator]: Completed translation [2021-12-21 22:23:41,388 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41 WrapperNode [2021-12-21 22:23:41,389 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 22:23:41,389 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 22:23:41,389 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 22:23:41,390 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 22:23:41,395 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:41,420 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:41,719 INFO L137 Inliner]: procedures = 91, calls = 340, calls flagged for inlining = 193, calls inlined = 975, statements flattened = 34881 [2021-12-21 22:23:41,719 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 22:23:41,720 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 22:23:41,720 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 22:23:41,720 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 22:23:41,778 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:41,778 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:41,862 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:41,863 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:42,127 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:42,391 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:42,436 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:42,613 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 22:23:42,614 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 22:23:42,614 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 22:23:42,615 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 22:23:42,616 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (1/1) ... [2021-12-21 22:23:42,622 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:42,631 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:23:42,672 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:23:42,675 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-21 22:23:42,699 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 22:23:42,699 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 22:23:42,700 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 22:23:42,700 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 22:23:42,853 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 22:23:42,855 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 22:23:52,452 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 22:23:52,582 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 22:23:52,582 INFO L299 CfgBuilder]: Removed 61 assume(true) statements. [2021-12-21 22:23:52,595 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 10:23:52 BoogieIcfgContainer [2021-12-21 22:23:52,596 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 22:23:52,597 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-21 22:23:52,597 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-21 22:23:52,600 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-21 22:23:52,600 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-21 22:23:52,600 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 21.12 10:23:40" (1/3) ... [2021-12-21 22:23:52,601 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1470d1a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.12 10:23:52, skipping insertion in model container [2021-12-21 22:23:52,601 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-21 22:23:52,601 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:41" (2/3) ... [2021-12-21 22:23:52,601 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1470d1a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.12 10:23:52, skipping insertion in model container [2021-12-21 22:23:52,601 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-21 22:23:52,602 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 10:23:52" (3/3) ... [2021-12-21 22:23:52,603 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product29.cil.c [2021-12-21 22:23:52,651 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-21 22:23:52,652 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-21 22:23:52,652 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-21 22:23:52,652 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-21 22:23:52,652 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-21 22:23:52,652 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-21 22:23:52,652 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-21 22:23:52,652 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-21 22:23:52,785 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9452 states, 9451 states have (on average 1.8796952703417629) internal successors, (17765), 9451 states have internal predecessors, (17765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:52,927 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2376 [2021-12-21 22:23:52,928 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:23:52,928 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:23:52,937 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:52,937 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:52,937 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-21 22:23:52,960 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9452 states, 9451 states have (on average 1.8796952703417629) internal successors, (17765), 9451 states have internal predecessors, (17765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:53,059 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2376 [2021-12-21 22:23:53,059 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:23:53,059 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:23:53,061 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:53,061 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:53,067 INFO L791 eck$LassoCheckResult]: Stem: 7706#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 4637#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 8568#L2963true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 9086#L2956true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 93#L2971true main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 7732#L2927true assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 8672#L2901true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1816#L783true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 3966#L808true aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9284#L409true assume 0 == initPersonOnFloor_~floor#1; 8089#L410true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1054#L517-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2576#L201true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7867#L213-2true assume { :end_inline_callOnFloor } true; 2595#L553true assume { :end_inline_initPersonOnFloor } true; 1555#L2662true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 8984#L783-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 3206#L808-1true angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5674#L409-1true assume 0 == initPersonOnFloor_~floor#1; 6211#L410-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3553#L517-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8374#L201-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6428#L213-5true assume { :end_inline_callOnFloor } true; 1709#L553-1true assume { :end_inline_initPersonOnFloor } true; 4080#L2673true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1843#L1163true __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 3144#L2408true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 661#L1792true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 8169#L1111true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 635#L1128true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1204#L1149true stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 9278#L1803true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 8936#L1942true assume !(0 != timeShift_~tmp___9~2#1); 5969#L2033true assume 1 == ~doorState~0;~doorState~0 := 0; 164#L2033-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 7550#L1695true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 4370#L1716true stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 4534#L1668true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 4904#L1315-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 5076#L1484-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 232#L1637-2true stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 1370#L1686true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 9151#L2041true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 6746#L1730true assume !(1 == ~currentHeading~0); 5299#L1740true assume !(0 == ~currentFloorID~0); 5015#L1740-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5669#L1746-1true assume { :end_inline_continueInDirection } true; 4096#L2050-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 1037#L2425true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 2031#L2426true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 6618#L2245true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 895#L2249-2true [2021-12-21 22:23:53,068 INFO L793 eck$LassoCheckResult]: Loop: 895#L2249-2true assume !false; 87#L2250true assume existInLiftCallsInDirection_~i~0#1 < 5; 6842#L2251true assume !(0 == existInLiftCallsInDirection_~i~0#1); 6590#L2264true assume !(1 == existInLiftCallsInDirection_~i~0#1); 9034#L2273true assume !(2 == existInLiftCallsInDirection_~i~0#1); 7122#L2282true assume !(3 == existInLiftCallsInDirection_~i~0#1); 5809#L2291true assume !(4 == existInLiftCallsInDirection_~i~0#1); 103#L2292-1true existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 895#L2249-2true [2021-12-21 22:23:53,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:53,072 INFO L85 PathProgramCache]: Analyzing trace with hash 1983246906, now seen corresponding path program 1 times [2021-12-21 22:23:53,079 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:53,080 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982648294] [2021-12-21 22:23:53,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:53,081 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:53,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:53,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:53,331 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:53,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982648294] [2021-12-21 22:23:53,332 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982648294] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:53,333 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:53,333 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 22:23:53,334 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1274142539] [2021-12-21 22:23:53,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:53,338 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:23:53,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:53,339 INFO L85 PathProgramCache]: Analyzing trace with hash 110182909, now seen corresponding path program 1 times [2021-12-21 22:23:53,339 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:53,339 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064181847] [2021-12-21 22:23:53,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:53,340 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:53,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:23:53,346 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:23:53,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:23:53,362 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:23:53,423 INFO L210 LassoAnalysis]: Preferences: [2021-12-21 22:23:53,423 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-21 22:23:53,424 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-21 22:23:53,424 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-21 22:23:53,424 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-21 22:23:53,424 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:53,424 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-21 22:23:53,424 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-21 22:23:53,425 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration1_Loop [2021-12-21 22:23:53,425 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-21 22:23:53,425 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-21 22:23:53,439 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:23:53,500 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-21 22:23:53,500 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-21 22:23:53,502 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:53,502 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:23:53,507 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:23:53,516 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-21 22:23:53,516 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-21 22:23:53,517 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-21 22:23:53,562 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2021-12-21 22:23:53,562 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:53,562 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:23:53,567 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:23:53,568 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-21 22:23:53,570 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-21 22:23:53,570 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-21 22:23:53,597 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-21 22:23:53,600 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-21 22:23:53,601 INFO L210 LassoAnalysis]: Preferences: [2021-12-21 22:23:53,601 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-21 22:23:53,601 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-21 22:23:53,601 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-21 22:23:53,601 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-21 22:23:53,601 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:53,601 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-21 22:23:53,601 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-21 22:23:53,601 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration1_Loop [2021-12-21 22:23:53,601 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-21 22:23:53,602 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-21 22:23:53,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:23:53,642 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-21 22:23:53,646 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-21 22:23:53,647 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:53,648 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:23:53,651 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:23:53,660 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-21 22:23:53,668 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-21 22:23:53,668 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-21 22:23:53,668 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-21 22:23:53,668 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-21 22:23:53,669 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-21 22:23:53,672 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-21 22:23:53,672 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-21 22:23:53,676 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-21 22:23:53,683 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-21 22:23:53,687 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-21 22:23:53,687 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-21 22:23:53,688 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:53,690 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:23:53,692 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:23:53,694 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-21 22:23:53,695 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-21 22:23:53,695 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-21 22:23:53,695 INFO L513 LassoAnalysis]: Proved termination. [2021-12-21 22:23:53,696 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2021-12-21 22:23:53,719 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-12-21 22:23:53,722 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-21 22:23:53,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:53,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:53,885 INFO L263 TraceCheckSpWp]: Trace formula consists of 630 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-21 22:23:53,890 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 22:23:53,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:53,996 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-21 22:23:53,997 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 22:23:54,157 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:54,185 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-21 22:23:54,212 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9452 states, 9451 states have (on average 1.8796952703417629) internal successors, (17765), 9451 states have internal predecessors, (17765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:55,216 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-12-21 22:23:59,147 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9452 states, 9451 states have (on average 1.8796952703417629) internal successors, (17765), 9451 states have internal predecessors, (17765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 107590 states and 202081 transitions. Complement of second has 18 states. [2021-12-21 22:23:59,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-21 22:23:59,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:59,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 109931 transitions. [2021-12-21 22:23:59,300 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109931 transitions. Stem has 51 letters. Loop has 8 letters. [2021-12-21 22:23:59,302 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:23:59,302 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109931 transitions. Stem has 59 letters. Loop has 8 letters. [2021-12-21 22:23:59,303 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:23:59,303 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109931 transitions. Stem has 51 letters. Loop has 16 letters. [2021-12-21 22:23:59,306 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:23:59,306 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 107590 states and 202081 transitions. [2021-12-21 22:24:00,153 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15160 [2021-12-21 22:24:00,529 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 107590 states to 58407 states and 109654 transitions. [2021-12-21 22:24:00,530 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58377 [2021-12-21 22:24:00,609 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58378 [2021-12-21 22:24:00,610 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58407 states and 109654 transitions. [2021-12-21 22:24:00,616 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:00,617 INFO L681 BuchiCegarLoop]: Abstraction has 58407 states and 109654 transitions. [2021-12-21 22:24:00,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58407 states and 109654 transitions. [2021-12-21 22:24:01,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58407 to 16982. [2021-12-21 22:24:01,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16982 states, 16982 states have (on average 1.8723942998468968) internal successors, (31797), 16981 states have internal predecessors, (31797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:01,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16982 states to 16982 states and 31797 transitions. [2021-12-21 22:24:01,238 INFO L704 BuchiCegarLoop]: Abstraction has 16982 states and 31797 transitions. [2021-12-21 22:24:01,238 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:01,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 22:24:01,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 22:24:01,244 INFO L87 Difference]: Start difference. First operand 16982 states and 31797 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:01,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:01,891 INFO L93 Difference]: Finished difference Result 24537 states and 45793 transitions. [2021-12-21 22:24:01,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:01,892 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24537 states and 45793 transitions. [2021-12-21 22:24:02,008 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 8682 [2021-12-21 22:24:02,098 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24537 states to 24524 states and 45780 transitions. [2021-12-21 22:24:02,098 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24505 [2021-12-21 22:24:02,121 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24505 [2021-12-21 22:24:02,122 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24524 states and 45780 transitions. [2021-12-21 22:24:02,123 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:02,124 INFO L681 BuchiCegarLoop]: Abstraction has 24524 states and 45780 transitions. [2021-12-21 22:24:02,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24524 states and 45780 transitions. [2021-12-21 22:24:02,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24524 to 9449. [2021-12-21 22:24:02,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9449 states, 9449 states have (on average 1.8667583871309132) internal successors, (17639), 9448 states have internal predecessors, (17639), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:02,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9449 states to 9449 states and 17639 transitions. [2021-12-21 22:24:02,351 INFO L704 BuchiCegarLoop]: Abstraction has 9449 states and 17639 transitions. [2021-12-21 22:24:02,351 INFO L587 BuchiCegarLoop]: Abstraction has 9449 states and 17639 transitions. [2021-12-21 22:24:02,352 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-21 22:24:02,352 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9449 states and 17639 transitions. [2021-12-21 22:24:02,380 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2376 [2021-12-21 22:24:02,381 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:02,381 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:02,382 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:02,382 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:02,383 INFO L791 eck$LassoCheckResult]: Stem: 167947#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 166074#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 166075#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 168165#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 159030#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 159031#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 167956#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 162585#L783 assume !(0 == getOrigin_~person#1); 162586#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 159626#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 165472#L409 assume 0 == initPersonOnFloor_~floor#1; 168050#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159108#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 161198#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 161035#L213-2 assume { :end_inline_callOnFloor } true; 163783#L553 assume { :end_inline_initPersonOnFloor } true; 162150#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 162151#L783-1 assume !(0 == getOrigin_~person#1); 158923#L787-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 158924#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 164614#L409-1 assume 0 == initPersonOnFloor_~floor#1; 166905#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159498#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 165023#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 165515#L213-5 assume { :end_inline_callOnFloor } true; 162400#L553-1 assume { :end_inline_initPersonOnFloor } true; 162401#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 162626#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 162627#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 160397#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 160398#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 160344#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 160345#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 161499#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 168205#L1942 assume !(0 != timeShift_~tmp___9~2#1); 167093#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 159221#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 159222#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 161675#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 165839#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 165979#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 166318#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 159390#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 159391#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 161824#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 167525#L1730 assume !(1 == ~currentHeading~0); 166625#L1740 assume !(0 == ~currentFloorID~0); 166418#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 166419#L1746-1 assume { :end_inline_continueInDirection } true; 160797#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 161166#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 161167#L2426 assume !(1 == ~prevDir~0); 162918#L2452 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 163040#L2245-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 164958#L2249-8 [2021-12-21 22:24:02,383 INFO L793 eck$LassoCheckResult]: Loop: 164958#L2249-8 assume !false; 162833#L2250-2 assume existInLiftCallsInDirection_~i~0#1 < 5; 162834#L2251-2 assume !(0 == existInLiftCallsInDirection_~i~0#1); 166255#L2264-2 assume !(1 == existInLiftCallsInDirection_~i~0#1); 163850#L2273-2 assume !(2 == existInLiftCallsInDirection_~i~0#1); 163476#L2282-2 assume !(3 == existInLiftCallsInDirection_~i~0#1); 163478#L2291-2 assume !(4 == existInLiftCallsInDirection_~i~0#1); 166982#L2292-5 existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 164958#L2249-8 [2021-12-21 22:24:02,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:02,384 INFO L85 PathProgramCache]: Analyzing trace with hash 1784092358, now seen corresponding path program 1 times [2021-12-21 22:24:02,384 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:02,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178420576] [2021-12-21 22:24:02,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:02,385 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:02,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:02,481 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:02,482 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:02,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178420576] [2021-12-21 22:24:02,482 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [178420576] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:02,483 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:02,483 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 22:24:02,483 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977383082] [2021-12-21 22:24:02,483 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:02,484 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:02,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:02,485 INFO L85 PathProgramCache]: Analyzing trace with hash -2107545347, now seen corresponding path program 1 times [2021-12-21 22:24:02,485 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:02,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [668444059] [2021-12-21 22:24:02,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:02,485 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:02,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:02,492 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:02,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:02,498 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:02,530 INFO L210 LassoAnalysis]: Preferences: [2021-12-21 22:24:02,530 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-21 22:24:02,530 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-21 22:24:02,530 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-21 22:24:02,531 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-21 22:24:02,531 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:02,531 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-21 22:24:02,531 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-21 22:24:02,531 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration2_Loop [2021-12-21 22:24:02,531 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-21 22:24:02,531 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-21 22:24:02,532 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:02,568 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-21 22:24:02,568 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-21 22:24:02,572 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:02,572 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:02,573 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:02,575 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-21 22:24:02,576 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-21 22:24:02,576 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-21 22:24:02,621 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-12-21 22:24:02,621 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:02,621 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:02,622 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:02,624 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-21 22:24:02,627 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-21 22:24:02,627 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-21 22:24:02,667 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-21 22:24:02,673 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-12-21 22:24:02,674 INFO L210 LassoAnalysis]: Preferences: [2021-12-21 22:24:02,674 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-21 22:24:02,674 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-21 22:24:02,674 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-21 22:24:02,674 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-21 22:24:02,674 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:02,674 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-21 22:24:02,674 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-21 22:24:02,674 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration2_Loop [2021-12-21 22:24:02,674 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-21 22:24:02,674 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-21 22:24:02,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:02,708 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-21 22:24:02,709 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-21 22:24:02,709 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:02,709 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:02,710 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:02,722 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-21 22:24:02,730 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-21 22:24:02,730 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-21 22:24:02,731 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-21 22:24:02,731 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-21 22:24:02,731 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-21 22:24:02,732 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-21 22:24:02,732 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-21 22:24:02,734 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-21 22:24:02,743 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-21 22:24:02,775 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2021-12-21 22:24:02,776 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-21 22:24:02,776 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:02,776 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:02,777 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:02,779 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-21 22:24:02,780 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-21 22:24:02,780 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-21 22:24:02,780 INFO L513 LassoAnalysis]: Proved termination. [2021-12-21 22:24:02,780 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2021-12-21 22:24:02,804 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2021-12-21 22:24:02,805 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-21 22:24:02,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:02,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:02,910 INFO L263 TraceCheckSpWp]: Trace formula consists of 633 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-21 22:24:02,912 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 22:24:03,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:03,045 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-21 22:24:03,045 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 22:24:03,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:03,212 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2021-12-21 22:24:03,212 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9449 states and 17639 transitions. cyclomatic complexity: 8224 Second operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:03,823 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2021-12-21 22:24:06,515 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9449 states and 17639 transitions. cyclomatic complexity: 8224. Second operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 99821 states and 187341 transitions. Complement of second has 17 states. [2021-12-21 22:24:06,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2021-12-21 22:24:06,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:06,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 95400 transitions. [2021-12-21 22:24:06,579 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95400 transitions. Stem has 54 letters. Loop has 8 letters. [2021-12-21 22:24:06,580 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:24:06,580 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95400 transitions. Stem has 62 letters. Loop has 8 letters. [2021-12-21 22:24:06,580 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:24:06,581 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95400 transitions. Stem has 54 letters. Loop has 16 letters. [2021-12-21 22:24:06,581 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:24:06,581 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 99821 states and 187341 transitions. [2021-12-21 22:24:06,947 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15160 [2021-12-21 22:24:07,201 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 99821 states to 58413 states and 109561 transitions. [2021-12-21 22:24:07,201 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58364 [2021-12-21 22:24:07,511 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58365 [2021-12-21 22:24:07,512 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58413 states and 109561 transitions. [2021-12-21 22:24:07,519 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:07,519 INFO L681 BuchiCegarLoop]: Abstraction has 58413 states and 109561 transitions. [2021-12-21 22:24:07,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58413 states and 109561 transitions. [2021-12-21 22:24:07,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58413 to 9473. [2021-12-21 22:24:07,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9473 states, 9473 states have (on average 1.866040325134593) internal successors, (17677), 9472 states have internal predecessors, (17677), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:07,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9473 states to 9473 states and 17677 transitions. [2021-12-21 22:24:07,988 INFO L704 BuchiCegarLoop]: Abstraction has 9473 states and 17677 transitions. [2021-12-21 22:24:07,988 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:07,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 22:24:07,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 22:24:07,990 INFO L87 Difference]: Start difference. First operand 9473 states and 17677 transitions. Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:08,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:08,649 INFO L93 Difference]: Finished difference Result 28202 states and 52601 transitions. [2021-12-21 22:24:08,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:08,650 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28202 states and 52601 transitions. [2021-12-21 22:24:08,764 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7140 [2021-12-21 22:24:09,021 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28202 states to 28202 states and 52601 transitions. [2021-12-21 22:24:09,022 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28088 [2021-12-21 22:24:09,042 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28088 [2021-12-21 22:24:09,042 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28202 states and 52601 transitions. [2021-12-21 22:24:09,046 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:09,046 INFO L681 BuchiCegarLoop]: Abstraction has 28202 states and 52601 transitions. [2021-12-21 22:24:09,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28202 states and 52601 transitions. [2021-12-21 22:24:09,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28202 to 9488. [2021-12-21 22:24:09,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9488 states, 9488 states have (on average 1.8646711635750421) internal successors, (17692), 9487 states have internal predecessors, (17692), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:09,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9488 states to 9488 states and 17692 transitions. [2021-12-21 22:24:09,276 INFO L704 BuchiCegarLoop]: Abstraction has 9488 states and 17692 transitions. [2021-12-21 22:24:09,277 INFO L587 BuchiCegarLoop]: Abstraction has 9488 states and 17692 transitions. [2021-12-21 22:24:09,277 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-21 22:24:09,277 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9488 states and 17692 transitions. [2021-12-21 22:24:09,310 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:09,310 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:09,311 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:09,312 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:09,312 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:09,313 INFO L791 eck$LassoCheckResult]: Stem: 315146#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 313258#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 313259#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 315364#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 306207#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 306208#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 315155#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 309761#L783 assume !(0 == getOrigin_~person#1); 309762#L787 assume !(1 == getOrigin_~person#1); 306802#L791 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 306803#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 315431#L409 assume 0 == initPersonOnFloor_~floor#1; 315249#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 306285#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 308373#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 308211#L213-2 assume { :end_inline_callOnFloor } true; 310964#L553 assume { :end_inline_initPersonOnFloor } true; 309326#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 309327#L783-1 assume !(0 == getOrigin_~person#1); 306100#L787-1 assume !(1 == getOrigin_~person#1); 306102#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 312188#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 315445#L409-1 assume 0 == initPersonOnFloor_~floor#1; 314442#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 306675#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 312206#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 312699#L213-5 assume { :end_inline_callOnFloor } true; 309576#L553-1 assume { :end_inline_initPersonOnFloor } true; 309577#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 309802#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 309803#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 307573#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 307574#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 307520#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 307521#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 308675#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 315404#L1942 assume !(0 != timeShift_~tmp___9~2#1); 314286#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 306398#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 306399#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 308851#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 313023#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 313163#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 313505#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 306567#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 306568#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 309000#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 314724#L1730 assume !(1 == ~currentHeading~0); 313815#L1740 assume !(0 == ~currentFloorID~0); 313605#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313606#L1746-1 assume { :end_inline_continueInDirection } true; 307973#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 308342#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 308343#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 310097#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 312766#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 306887#L2315-2 [2021-12-21 22:24:09,313 INFO L793 eck$LassoCheckResult]: Loop: 306887#L2315-2 assume !false; 306888#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 313082#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 313083#L2324-2 assume !false; 315147#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 313490#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 306887#L2315-2 [2021-12-21 22:24:09,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:09,314 INFO L85 PathProgramCache]: Analyzing trace with hash -1148840185, now seen corresponding path program 1 times [2021-12-21 22:24:09,314 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:09,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1315562088] [2021-12-21 22:24:09,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:09,315 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:09,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:09,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:09,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:09,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1315562088] [2021-12-21 22:24:09,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1315562088] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:09,388 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:09,389 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:24:09,389 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [976452238] [2021-12-21 22:24:09,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:09,389 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:09,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:09,390 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 1 times [2021-12-21 22:24:09,390 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:09,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [958513361] [2021-12-21 22:24:09,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:09,392 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:09,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:09,398 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:09,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:09,411 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:09,446 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:09,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:24:09,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:24:09,448 INFO L87 Difference]: Start difference. First operand 9488 states and 17692 transitions. cyclomatic complexity: 8239 Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:09,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:09,688 INFO L93 Difference]: Finished difference Result 18797 states and 35057 transitions. [2021-12-21 22:24:09,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 22:24:09,689 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18797 states and 35057 transitions. [2021-12-21 22:24:09,767 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4760 [2021-12-21 22:24:09,829 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18797 states to 18797 states and 35057 transitions. [2021-12-21 22:24:09,830 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18721 [2021-12-21 22:24:09,848 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18721 [2021-12-21 22:24:09,848 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18797 states and 35057 transitions. [2021-12-21 22:24:10,079 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:10,079 INFO L681 BuchiCegarLoop]: Abstraction has 18797 states and 35057 transitions. [2021-12-21 22:24:10,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18797 states and 35057 transitions. [2021-12-21 22:24:10,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18797 to 9454. [2021-12-21 22:24:10,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.8641844721810874) internal successors, (17624), 9453 states have internal predecessors, (17624), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:10,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17624 transitions. [2021-12-21 22:24:10,238 INFO L704 BuchiCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2021-12-21 22:24:10,238 INFO L587 BuchiCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2021-12-21 22:24:10,238 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-21 22:24:10,238 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17624 transitions. [2021-12-21 22:24:10,265 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:10,265 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:10,266 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:10,270 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:10,270 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:10,270 INFO L791 eck$LassoCheckResult]: Stem: 343407#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 341525#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 341526#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 343624#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 334498#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 334499#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 343416#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 338043#L783 assume !(0 == getOrigin_~person#1); 338044#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 340924#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 340925#L409 assume !(0 == initPersonOnFloor_~floor#1); 335486#L436 assume !(1 == initPersonOnFloor_~floor#1); 335487#L463 assume !(2 == initPersonOnFloor_~floor#1); 336650#L490 assume 3 == initPersonOnFloor_~floor#1; 336651#L491 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 335335#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 336656#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 336496#L213-2 assume { :end_inline_callOnFloor } true; 339236#L553 assume { :end_inline_initPersonOnFloor } true; 337606#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 337607#L783-1 assume !(0 == getOrigin_~person#1); 334393#L787-1 assume !(1 == getOrigin_~person#1); 334395#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 340458#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 343702#L409-1 assume 0 == initPersonOnFloor_~floor#1; 342706#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 334963#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 340478#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 340968#L213-5 assume { :end_inline_callOnFloor } true; 337859#L553-1 assume { :end_inline_initPersonOnFloor } true; 337860#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 338082#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 338083#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 335858#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 335859#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 335805#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 335806#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 336956#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 343664#L1942 assume !(0 != timeShift_~tmp___9~2#1); 342550#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 334686#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 334687#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 337132#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 341290#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 341430#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 341771#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 334858#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 334859#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 337280#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 342985#L1730 assume !(1 == ~currentHeading~0); 342081#L1740 assume !(0 == ~currentFloorID~0); 341871#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 341872#L1746-1 assume { :end_inline_continueInDirection } true; 336258#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 336625#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 336626#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 338377#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 341035#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 335172#L2315-2 [2021-12-21 22:24:10,271 INFO L793 eck$LassoCheckResult]: Loop: 335172#L2315-2 assume !false; 335173#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 341349#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 341350#L2324-2 assume !false; 343408#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 341756#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 335172#L2315-2 [2021-12-21 22:24:10,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:10,272 INFO L85 PathProgramCache]: Analyzing trace with hash -1782986316, now seen corresponding path program 1 times [2021-12-21 22:24:10,272 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:10,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [220593348] [2021-12-21 22:24:10,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:10,273 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:10,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:10,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:10,332 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:10,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [220593348] [2021-12-21 22:24:10,333 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [220593348] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:10,333 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:10,334 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 22:24:10,334 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [81211519] [2021-12-21 22:24:10,334 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:10,334 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:10,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:10,335 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 2 times [2021-12-21 22:24:10,335 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:10,335 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1483142444] [2021-12-21 22:24:10,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:10,336 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:10,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:10,342 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:10,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:10,348 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:10,367 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:10,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 22:24:10,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 22:24:10,369 INFO L87 Difference]: Start difference. First operand 9454 states and 17624 transitions. cyclomatic complexity: 8205 Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:10,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:10,714 INFO L93 Difference]: Finished difference Result 13198 states and 24604 transitions. [2021-12-21 22:24:10,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:10,716 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13198 states and 24604 transitions. [2021-12-21 22:24:10,787 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4392 [2021-12-21 22:24:10,839 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13198 states to 13198 states and 24604 transitions. [2021-12-21 22:24:10,839 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13160 [2021-12-21 22:24:10,847 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13160 [2021-12-21 22:24:10,848 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13198 states and 24604 transitions. [2021-12-21 22:24:10,849 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:10,849 INFO L681 BuchiCegarLoop]: Abstraction has 13198 states and 24604 transitions. [2021-12-21 22:24:10,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13198 states and 24604 transitions. [2021-12-21 22:24:11,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13198 to 9454. [2021-12-21 22:24:11,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.8635498201819336) internal successors, (17618), 9453 states have internal predecessors, (17618), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:11,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17618 transitions. [2021-12-21 22:24:11,208 INFO L704 BuchiCegarLoop]: Abstraction has 9454 states and 17618 transitions. [2021-12-21 22:24:11,208 INFO L587 BuchiCegarLoop]: Abstraction has 9454 states and 17618 transitions. [2021-12-21 22:24:11,208 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-21 22:24:11,208 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17618 transitions. [2021-12-21 22:24:11,233 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:11,233 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:11,233 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:11,234 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:11,234 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:11,235 INFO L791 eck$LassoCheckResult]: Stem: 366076#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 364190#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 364191#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 366293#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 357163#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 357164#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 366085#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 360706#L783 assume !(0 == getOrigin_~person#1); 360707#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 363589#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 363590#L409 assume !(0 == initPersonOnFloor_~floor#1); 358151#L436 assume !(1 == initPersonOnFloor_~floor#1); 358152#L463 assume !(2 == initPersonOnFloor_~floor#1); 359315#L490 assume 3 == initPersonOnFloor_~floor#1; 359316#L491 assume !(0 == initPersonOnFloor_~person#1); 361050#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 358000#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 359321#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 359161#L213-2 assume { :end_inline_callOnFloor } true; 361901#L553 assume { :end_inline_initPersonOnFloor } true; 360271#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 360272#L783-1 assume !(0 == getOrigin_~person#1); 357056#L787-1 assume !(1 == getOrigin_~person#1); 357058#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 363123#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 366371#L409-1 assume 0 == initPersonOnFloor_~floor#1; 365373#L410-2 assume !(0 == initPersonOnFloor_~person#1); 361452#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 357628#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 363141#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 363633#L213-5 assume { :end_inline_callOnFloor } true; 360521#L553-1 assume { :end_inline_initPersonOnFloor } true; 360522#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 360747#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 360748#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 358523#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 358524#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 358470#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 358471#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 359621#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 366333#L1942 assume !(0 != timeShift_~tmp___9~2#1); 365217#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 357351#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 357352#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 359797#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 363955#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 364095#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 364436#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 357520#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 357521#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 359945#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 365654#L1730 assume !(1 == ~currentHeading~0); 364746#L1740 assume !(0 == ~currentFloorID~0); 364536#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 364537#L1746-1 assume { :end_inline_continueInDirection } true; 358923#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 359290#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 359291#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 361042#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 363700#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 357837#L2315-2 [2021-12-21 22:24:11,237 INFO L793 eck$LassoCheckResult]: Loop: 357837#L2315-2 assume !false; 357838#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 364014#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 364015#L2324-2 assume !false; 366077#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 364421#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 357837#L2315-2 [2021-12-21 22:24:11,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:11,237 INFO L85 PathProgramCache]: Analyzing trace with hash -1217851280, now seen corresponding path program 1 times [2021-12-21 22:24:11,238 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:11,238 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345597138] [2021-12-21 22:24:11,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:11,238 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:11,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:11,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:11,305 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:11,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345597138] [2021-12-21 22:24:11,305 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [345597138] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:11,305 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:11,305 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 22:24:11,306 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [482814998] [2021-12-21 22:24:11,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:11,306 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:11,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:11,307 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 3 times [2021-12-21 22:24:11,308 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:11,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024209059] [2021-12-21 22:24:11,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:11,308 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:11,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:11,312 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:11,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:11,316 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:11,332 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:11,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 22:24:11,333 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 22:24:11,333 INFO L87 Difference]: Start difference. First operand 9454 states and 17618 transitions. cyclomatic complexity: 8199 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:11,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:11,929 INFO L93 Difference]: Finished difference Result 28161 states and 52515 transitions. [2021-12-21 22:24:11,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:11,929 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28161 states and 52515 transitions. [2021-12-21 22:24:12,020 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7140 [2021-12-21 22:24:12,091 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28161 states to 28161 states and 52515 transitions. [2021-12-21 22:24:12,091 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28047 [2021-12-21 22:24:12,106 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28047 [2021-12-21 22:24:12,107 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28161 states and 52515 transitions. [2021-12-21 22:24:12,112 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:12,112 INFO L681 BuchiCegarLoop]: Abstraction has 28161 states and 52515 transitions. [2021-12-21 22:24:12,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28161 states and 52515 transitions. [2021-12-21 22:24:12,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28161 to 9458. [2021-12-21 22:24:12,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.8630788750264327) internal successors, (17621), 9457 states have internal predecessors, (17621), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:12,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17621 transitions. [2021-12-21 22:24:12,291 INFO L704 BuchiCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2021-12-21 22:24:12,291 INFO L587 BuchiCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2021-12-21 22:24:12,292 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-21 22:24:12,292 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17621 transitions. [2021-12-21 22:24:12,312 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:12,313 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:12,313 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:12,313 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:12,313 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:12,314 INFO L791 eck$LassoCheckResult]: Stem: 403699#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 401816#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 401817#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 403917#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 394787#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 394788#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 403708#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 398330#L783 assume !(0 == getOrigin_~person#1); 398331#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 401215#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 401216#L409 assume !(0 == initPersonOnFloor_~floor#1); 395775#L436 assume !(1 == initPersonOnFloor_~floor#1); 395776#L463 assume !(2 == initPersonOnFloor_~floor#1); 396939#L490 assume 3 == initPersonOnFloor_~floor#1; 396940#L491 assume !(0 == initPersonOnFloor_~person#1); 398676#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 395624#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 396945#L201 assume !(0 == callOnFloor_~floorID#1); 399504#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 396785#L213-2 assume { :end_inline_callOnFloor } true; 399527#L553 assume { :end_inline_initPersonOnFloor } true; 397895#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 397896#L783-1 assume !(0 == getOrigin_~person#1); 394680#L787-1 assume !(1 == getOrigin_~person#1); 394682#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 400749#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 403992#L409-1 assume 0 == initPersonOnFloor_~floor#1; 402997#L410-2 assume !(0 == initPersonOnFloor_~person#1); 399078#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 398657#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 400767#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 401259#L213-5 assume { :end_inline_callOnFloor } true; 398148#L553-1 assume { :end_inline_initPersonOnFloor } true; 398149#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 398372#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 398373#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 396147#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 396148#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 396094#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 396095#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 397245#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 403957#L1942 assume !(0 != timeShift_~tmp___9~2#1); 402841#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 394975#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 394976#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 397421#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 401581#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 401721#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 402062#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 395147#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 395148#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 397569#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 403277#L1730 assume !(1 == ~currentHeading~0); 402372#L1740 assume !(0 == ~currentFloorID~0); 402162#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 402163#L1746-1 assume { :end_inline_continueInDirection } true; 396547#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 396914#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 396915#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 398668#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 401326#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 395461#L2315-2 [2021-12-21 22:24:12,314 INFO L793 eck$LassoCheckResult]: Loop: 395461#L2315-2 assume !false; 395462#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 401640#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 401641#L2324-2 assume !false; 403700#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 402047#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 395461#L2315-2 [2021-12-21 22:24:12,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:12,315 INFO L85 PathProgramCache]: Analyzing trace with hash -690056843, now seen corresponding path program 1 times [2021-12-21 22:24:12,315 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:12,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860984160] [2021-12-21 22:24:12,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:12,316 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:12,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:12,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:12,357 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:12,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860984160] [2021-12-21 22:24:12,358 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860984160] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:12,358 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:12,358 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 22:24:12,358 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [429174317] [2021-12-21 22:24:12,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:12,359 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:12,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:12,359 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 4 times [2021-12-21 22:24:12,360 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:12,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744285223] [2021-12-21 22:24:12,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:12,361 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:12,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:12,366 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:12,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:12,372 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:12,389 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:12,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 22:24:12,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 22:24:12,390 INFO L87 Difference]: Start difference. First operand 9458 states and 17621 transitions. cyclomatic complexity: 8198 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:12,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:12,883 INFO L93 Difference]: Finished difference Result 28166 states and 52517 transitions. [2021-12-21 22:24:12,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:12,884 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28166 states and 52517 transitions. [2021-12-21 22:24:13,003 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7140 [2021-12-21 22:24:13,084 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28166 states to 28166 states and 52517 transitions. [2021-12-21 22:24:13,084 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28052 [2021-12-21 22:24:13,110 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28052 [2021-12-21 22:24:13,110 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28166 states and 52517 transitions. [2021-12-21 22:24:13,113 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:13,114 INFO L681 BuchiCegarLoop]: Abstraction has 28166 states and 52517 transitions. [2021-12-21 22:24:13,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28166 states and 52517 transitions. [2021-12-21 22:24:13,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28166 to 9464. [2021-12-21 22:24:13,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9464 states, 9464 states have (on average 1.8624260355029585) internal successors, (17626), 9463 states have internal predecessors, (17626), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:13,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9464 states to 9464 states and 17626 transitions. [2021-12-21 22:24:13,306 INFO L704 BuchiCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2021-12-21 22:24:13,306 INFO L587 BuchiCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2021-12-21 22:24:13,307 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-21 22:24:13,307 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9464 states and 17626 transitions. [2021-12-21 22:24:13,329 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:13,329 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:13,330 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:13,330 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:13,330 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:13,331 INFO L791 eck$LassoCheckResult]: Stem: 441335#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 439453#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 439454#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 441554#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 432420#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 432421#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 441344#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 435964#L783 assume !(0 == getOrigin_~person#1); 435965#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 438851#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 438852#L409 assume !(0 == initPersonOnFloor_~floor#1); 433409#L436 assume !(1 == initPersonOnFloor_~floor#1); 433410#L463 assume !(2 == initPersonOnFloor_~floor#1); 434573#L490 assume 3 == initPersonOnFloor_~floor#1; 434574#L491 assume !(0 == initPersonOnFloor_~person#1); 436311#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 433258#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 434579#L201 assume !(0 == callOnFloor_~floorID#1); 437139#L204 assume !(1 == callOnFloor_~floorID#1); 434418#L207 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 434419#L213-2 assume { :end_inline_callOnFloor } true; 437162#L553 assume { :end_inline_initPersonOnFloor } true; 435529#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 435530#L783-1 assume !(0 == getOrigin_~person#1); 432313#L787-1 assume !(1 == getOrigin_~person#1); 432315#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 437994#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 437995#L409-1 assume 0 == initPersonOnFloor_~floor#1; 440289#L410-2 assume !(0 == initPersonOnFloor_~person#1); 436713#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 436292#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 441634#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 438895#L213-5 assume { :end_inline_callOnFloor } true; 435779#L553-1 assume { :end_inline_initPersonOnFloor } true; 435780#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 436006#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 436007#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 433781#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 433782#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 433728#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 433729#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 434879#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 441594#L1942 assume !(0 != timeShift_~tmp___9~2#1); 440478#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 432608#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 432609#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 435055#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 439217#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 439358#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 439699#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 432778#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 432779#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 435203#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 440913#L1730 assume !(1 == ~currentHeading~0); 440009#L1740 assume !(0 == ~currentFloorID~0); 439799#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 439800#L1746-1 assume { :end_inline_continueInDirection } true; 434181#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 434548#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 434549#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 436303#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 438962#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 433095#L2315-2 [2021-12-21 22:24:13,331 INFO L793 eck$LassoCheckResult]: Loop: 433095#L2315-2 assume !false; 433096#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 439277#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 439278#L2324-2 assume !false; 441336#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 439684#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 433095#L2315-2 [2021-12-21 22:24:13,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:13,332 INFO L85 PathProgramCache]: Analyzing trace with hash 543185621, now seen corresponding path program 1 times [2021-12-21 22:24:13,332 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:13,332 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [424298186] [2021-12-21 22:24:13,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:13,333 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:13,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:13,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:13,367 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:13,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [424298186] [2021-12-21 22:24:13,368 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [424298186] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:13,368 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:13,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 22:24:13,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1849359670] [2021-12-21 22:24:13,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:13,369 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:13,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:13,369 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 5 times [2021-12-21 22:24:13,369 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:13,370 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [93447421] [2021-12-21 22:24:13,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:13,370 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:13,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:13,376 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:13,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:13,379 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:13,396 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:13,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 22:24:13,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 22:24:13,397 INFO L87 Difference]: Start difference. First operand 9464 states and 17626 transitions. cyclomatic complexity: 8197 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:13,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:13,884 INFO L93 Difference]: Finished difference Result 28173 states and 52521 transitions. [2021-12-21 22:24:13,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:13,885 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28173 states and 52521 transitions. [2021-12-21 22:24:14,001 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7140 [2021-12-21 22:24:14,081 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28173 states to 28173 states and 52521 transitions. [2021-12-21 22:24:14,081 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28059 [2021-12-21 22:24:14,100 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28059 [2021-12-21 22:24:14,100 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28173 states and 52521 transitions. [2021-12-21 22:24:14,116 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:14,116 INFO L681 BuchiCegarLoop]: Abstraction has 28173 states and 52521 transitions. [2021-12-21 22:24:14,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28173 states and 52521 transitions. [2021-12-21 22:24:14,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28173 to 9472. [2021-12-21 22:24:14,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9472 states, 9472 states have (on average 1.8615920608108107) internal successors, (17633), 9471 states have internal predecessors, (17633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:14,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9472 states to 9472 states and 17633 transitions. [2021-12-21 22:24:14,256 INFO L704 BuchiCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2021-12-21 22:24:14,256 INFO L587 BuchiCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2021-12-21 22:24:14,256 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-21 22:24:14,256 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9472 states and 17633 transitions. [2021-12-21 22:24:14,283 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:14,283 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:14,284 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:14,321 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:14,321 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:14,322 INFO L791 eck$LassoCheckResult]: Stem: 478982#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 477101#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 477102#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 479201#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 470066#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 470067#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 478991#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 473613#L783 assume !(0 == getOrigin_~person#1); 473614#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 476499#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 476500#L409 assume !(0 == initPersonOnFloor_~floor#1); 471055#L436 assume !(1 == initPersonOnFloor_~floor#1); 471056#L463 assume !(2 == initPersonOnFloor_~floor#1); 472218#L490 assume 3 == initPersonOnFloor_~floor#1; 472219#L491 assume !(0 == initPersonOnFloor_~person#1); 473958#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 470904#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 472224#L201 assume !(0 == callOnFloor_~floorID#1); 474786#L204 assume !(1 == callOnFloor_~floorID#1); 472064#L207 assume !(2 == callOnFloor_~floorID#1); 472065#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 472763#L213-2 assume { :end_inline_callOnFloor } true; 474809#L553 assume { :end_inline_initPersonOnFloor } true; 473176#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 473177#L783-1 assume !(0 == getOrigin_~person#1); 469961#L787-1 assume !(1 == getOrigin_~person#1); 469963#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 475642#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 475643#L409-1 assume 0 == initPersonOnFloor_~floor#1; 477937#L410-2 assume !(0 == initPersonOnFloor_~person#1); 474360#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 473939#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 479283#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 476543#L213-5 assume { :end_inline_callOnFloor } true; 473429#L553-1 assume { :end_inline_initPersonOnFloor } true; 473430#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 473653#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 473654#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 471427#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 471428#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 471374#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 471375#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 472525#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 479241#L1942 assume !(0 != timeShift_~tmp___9~2#1); 478126#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 470254#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 470255#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 472701#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 476865#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 477006#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 477347#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 470427#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 470428#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 472850#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 478560#L1730 assume !(1 == ~currentHeading~0); 477657#L1740 assume !(0 == ~currentFloorID~0); 477447#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 477448#L1746-1 assume { :end_inline_continueInDirection } true; 471827#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 472193#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 472194#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 473950#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 476610#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 470741#L2315-2 [2021-12-21 22:24:14,322 INFO L793 eck$LassoCheckResult]: Loop: 470741#L2315-2 assume !false; 470742#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 476925#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 476926#L2324-2 assume !false; 478983#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 477332#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 470741#L2315-2 [2021-12-21 22:24:14,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:14,322 INFO L85 PathProgramCache]: Analyzing trace with hash -2124486854, now seen corresponding path program 1 times [2021-12-21 22:24:14,322 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:14,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1401585137] [2021-12-21 22:24:14,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:14,323 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:14,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:14,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:14,376 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:14,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1401585137] [2021-12-21 22:24:14,376 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1401585137] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:14,376 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:14,377 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 22:24:14,377 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555563582] [2021-12-21 22:24:14,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:14,377 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:14,377 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:14,378 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 6 times [2021-12-21 22:24:14,378 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:14,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1885121359] [2021-12-21 22:24:14,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:14,378 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:14,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:14,381 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:14,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:14,384 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:14,399 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:14,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 22:24:14,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 22:24:14,400 INFO L87 Difference]: Start difference. First operand 9472 states and 17633 transitions. cyclomatic complexity: 8196 Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:14,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:14,782 INFO L93 Difference]: Finished difference Result 20760 states and 38686 transitions. [2021-12-21 22:24:14,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 22:24:14,783 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20760 states and 38686 transitions. [2021-12-21 22:24:14,848 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8416 [2021-12-21 22:24:14,900 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20760 states to 20760 states and 38686 transitions. [2021-12-21 22:24:14,901 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20722 [2021-12-21 22:24:14,912 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20722 [2021-12-21 22:24:14,912 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20760 states and 38686 transitions. [2021-12-21 22:24:14,918 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:14,918 INFO L681 BuchiCegarLoop]: Abstraction has 20760 states and 38686 transitions. [2021-12-21 22:24:14,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20760 states and 38686 transitions. [2021-12-21 22:24:15,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20760 to 9458. [2021-12-21 22:24:15,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.86159864664834) internal successors, (17607), 9457 states have internal predecessors, (17607), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:15,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17607 transitions. [2021-12-21 22:24:15,045 INFO L704 BuchiCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2021-12-21 22:24:15,045 INFO L587 BuchiCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2021-12-21 22:24:15,046 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-21 22:24:15,046 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17607 transitions. [2021-12-21 22:24:15,062 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:15,062 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:15,062 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:15,063 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:15,063 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:15,063 INFO L791 eck$LassoCheckResult]: Stem: 509220#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 507340#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 507341#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 509437#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 500313#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 500314#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 509229#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 503861#L783 assume !(0 == getOrigin_~person#1); 503862#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 506740#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 506741#L409 assume !(0 == initPersonOnFloor_~floor#1); 501302#L436 assume !(1 == initPersonOnFloor_~floor#1); 501303#L463 assume !(2 == initPersonOnFloor_~floor#1); 502465#L490 assume 3 == initPersonOnFloor_~floor#1; 502466#L491 assume !(0 == initPersonOnFloor_~person#1); 504203#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 501151#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 502471#L201 assume !(0 == callOnFloor_~floorID#1); 505029#L204 assume !(1 == callOnFloor_~floorID#1); 502311#L207 assume !(2 == callOnFloor_~floorID#1); 502312#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 503011#L213-2 assume { :end_inline_callOnFloor } true; 505052#L553 assume { :end_inline_initPersonOnFloor } true; 503424#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 503425#L783-1 assume !(0 == getOrigin_~person#1); 500209#L787-1 assume !(1 == getOrigin_~person#1); 500210#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 505885#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 505886#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 505177#L436-1 assume 1 == initPersonOnFloor_~floor#1; 505178#L437-2 assume !(0 == initPersonOnFloor_~person#1); 507417#L440-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 504173#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 509515#L201-2 assume !(0 == callOnFloor_~floorID#1); 509512#L204-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 506783#L213-5 assume { :end_inline_callOnFloor } true; 503677#L553-1 assume { :end_inline_initPersonOnFloor } true; 503678#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 503901#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 503902#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 501674#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 501675#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 501621#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 501622#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 502773#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 509477#L1942 assume !(0 != timeShift_~tmp___9~2#1); 508363#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 500501#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 500502#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 502949#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 507105#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 507245#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 507585#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 500674#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 500675#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 503098#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 508799#L1730 assume !(1 == ~currentHeading~0); 507895#L1740 assume !(0 == ~currentFloorID~0); 507685#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 507686#L1746-1 assume { :end_inline_continueInDirection } true; 502074#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 502440#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 502441#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 504195#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 506850#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 500988#L2315-2 [2021-12-21 22:24:15,064 INFO L793 eck$LassoCheckResult]: Loop: 500988#L2315-2 assume !false; 500989#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 507164#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 507165#L2324-2 assume !false; 509221#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 507570#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 500988#L2315-2 [2021-12-21 22:24:15,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:15,064 INFO L85 PathProgramCache]: Analyzing trace with hash -687220060, now seen corresponding path program 1 times [2021-12-21 22:24:15,064 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:15,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1942924730] [2021-12-21 22:24:15,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:15,065 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:15,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:15,113 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:15,113 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:15,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1942924730] [2021-12-21 22:24:15,114 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1942924730] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:15,114 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:15,114 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 22:24:15,114 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [263172469] [2021-12-21 22:24:15,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:15,114 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:15,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:15,115 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 7 times [2021-12-21 22:24:15,115 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:15,115 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [554208917] [2021-12-21 22:24:15,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:15,116 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:15,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:15,119 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:15,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:15,121 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:15,137 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:15,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 22:24:15,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 22:24:15,137 INFO L87 Difference]: Start difference. First operand 9458 states and 17607 transitions. cyclomatic complexity: 8184 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:15,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:15,619 INFO L93 Difference]: Finished difference Result 20734 states and 38637 transitions. [2021-12-21 22:24:15,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 22:24:15,621 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20734 states and 38637 transitions. [2021-12-21 22:24:15,704 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8416 [2021-12-21 22:24:15,754 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20734 states to 20734 states and 38637 transitions. [2021-12-21 22:24:15,754 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20696 [2021-12-21 22:24:15,765 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20696 [2021-12-21 22:24:15,765 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20734 states and 38637 transitions. [2021-12-21 22:24:15,770 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:15,770 INFO L681 BuchiCegarLoop]: Abstraction has 20734 states and 38637 transitions. [2021-12-21 22:24:15,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20734 states and 38637 transitions. [2021-12-21 22:24:15,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20734 to 9452. [2021-12-21 22:24:15,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9452 states, 9452 states have (on average 1.861404993652137) internal successors, (17594), 9451 states have internal predecessors, (17594), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:15,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9452 states to 9452 states and 17594 transitions. [2021-12-21 22:24:15,892 INFO L704 BuchiCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2021-12-21 22:24:15,892 INFO L587 BuchiCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2021-12-21 22:24:15,892 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-21 22:24:15,892 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9452 states and 17594 transitions. [2021-12-21 22:24:15,907 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:15,907 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:15,907 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:15,908 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:15,908 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:15,908 INFO L791 eck$LassoCheckResult]: Stem: 539426#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 537545#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 537546#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 539644#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 530521#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 530522#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 539435#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 534069#L783 assume !(0 == getOrigin_~person#1); 534070#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 536945#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 536946#L409 assume !(0 == initPersonOnFloor_~floor#1); 531510#L436 assume !(1 == initPersonOnFloor_~floor#1); 531511#L463 assume !(2 == initPersonOnFloor_~floor#1); 532673#L490 assume 3 == initPersonOnFloor_~floor#1; 532674#L491 assume !(0 == initPersonOnFloor_~person#1); 534409#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 531359#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 532679#L201 assume !(0 == callOnFloor_~floorID#1); 535235#L204 assume !(1 == callOnFloor_~floorID#1); 532519#L207 assume !(2 == callOnFloor_~floorID#1); 532520#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 533219#L213-2 assume { :end_inline_callOnFloor } true; 535258#L553 assume { :end_inline_initPersonOnFloor } true; 533632#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 533633#L783-1 assume !(0 == getOrigin_~person#1); 530417#L787-1 assume !(1 == getOrigin_~person#1); 530418#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 536090#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 536091#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 535385#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 535386#L463-1 assume 2 == initPersonOnFloor_~floor#1; 536696#L464-2 assume !(0 == initPersonOnFloor_~person#1); 536697#L467-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 535851#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 536497#L201-2 assume !(0 == callOnFloor_~floorID#1); 539726#L204-2 assume !(1 == callOnFloor_~floorID#1); 539725#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 536988#L213-5 assume { :end_inline_callOnFloor } true; 533885#L553-1 assume { :end_inline_initPersonOnFloor } true; 533886#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 534109#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 534110#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 531882#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 531883#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 531829#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 531830#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 532981#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 539684#L1942 assume !(0 != timeShift_~tmp___9~2#1); 538566#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 530709#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 530710#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 533157#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 537310#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 537450#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 537789#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 530882#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 530883#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 533306#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 539000#L1730 assume !(1 == ~currentHeading~0); 538099#L1740 assume !(0 == ~currentFloorID~0); 537888#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 537889#L1746-1 assume { :end_inline_continueInDirection } true; 532282#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 532648#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 532649#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 534401#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 537055#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 531196#L2315-2 [2021-12-21 22:24:15,909 INFO L793 eck$LassoCheckResult]: Loop: 531196#L2315-2 assume !false; 531197#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 537369#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 537370#L2324-2 assume !false; 539427#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 537774#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 531196#L2315-2 [2021-12-21 22:24:15,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:15,909 INFO L85 PathProgramCache]: Analyzing trace with hash -831097181, now seen corresponding path program 1 times [2021-12-21 22:24:15,909 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:15,909 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810853458] [2021-12-21 22:24:15,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:15,909 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:15,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:15,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:15,951 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:15,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810853458] [2021-12-21 22:24:15,951 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810853458] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:15,952 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:15,952 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 22:24:15,952 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [401506856] [2021-12-21 22:24:15,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:15,952 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:15,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:15,953 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 8 times [2021-12-21 22:24:15,953 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:15,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [892579974] [2021-12-21 22:24:15,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:15,953 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:15,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:15,957 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:15,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:15,959 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:15,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:15,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 22:24:15,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 22:24:15,974 INFO L87 Difference]: Start difference. First operand 9452 states and 17594 transitions. cyclomatic complexity: 8177 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:16,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:16,345 INFO L93 Difference]: Finished difference Result 13237 states and 24631 transitions. [2021-12-21 22:24:16,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 22:24:16,346 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13237 states and 24631 transitions. [2021-12-21 22:24:16,389 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4392 [2021-12-21 22:24:16,416 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13237 states to 13237 states and 24631 transitions. [2021-12-21 22:24:16,416 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13199 [2021-12-21 22:24:16,421 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13199 [2021-12-21 22:24:16,421 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13237 states and 24631 transitions. [2021-12-21 22:24:16,422 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:16,422 INFO L681 BuchiCegarLoop]: Abstraction has 13237 states and 24631 transitions. [2021-12-21 22:24:16,431 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13237 states and 24631 transitions. [2021-12-21 22:24:16,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13237 to 9452. [2021-12-21 22:24:16,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9452 states, 9452 states have (on average 1.8605586119339823) internal successors, (17586), 9451 states have internal predecessors, (17586), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:16,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9452 states to 9452 states and 17586 transitions. [2021-12-21 22:24:16,515 INFO L704 BuchiCegarLoop]: Abstraction has 9452 states and 17586 transitions. [2021-12-21 22:24:16,515 INFO L587 BuchiCegarLoop]: Abstraction has 9452 states and 17586 transitions. [2021-12-21 22:24:16,515 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-21 22:24:16,516 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9452 states and 17586 transitions. [2021-12-21 22:24:16,531 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2021-12-21 22:24:16,531 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:16,531 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:16,532 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:16,532 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:16,532 INFO L791 eck$LassoCheckResult]: Stem: 562120#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 560242#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 560243#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 562337#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 553220#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 553221#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 562129#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 556766#L783 assume !(0 == getOrigin_~person#1); 556767#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 559642#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 559643#L409 assume !(0 == initPersonOnFloor_~floor#1); 554207#L436 assume !(1 == initPersonOnFloor_~floor#1); 554208#L463 assume !(2 == initPersonOnFloor_~floor#1); 555371#L490 assume 3 == initPersonOnFloor_~floor#1; 555372#L491 assume !(0 == initPersonOnFloor_~person#1); 557108#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 554056#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 555377#L201 assume !(0 == callOnFloor_~floorID#1); 557934#L204 assume !(1 == callOnFloor_~floorID#1); 555217#L207 assume !(2 == callOnFloor_~floorID#1); 555218#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 555918#L213-2 assume { :end_inline_callOnFloor } true; 557957#L553 assume { :end_inline_initPersonOnFloor } true; 556331#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 556332#L783-1 assume !(0 == getOrigin_~person#1); 553114#L787-1 assume !(1 == getOrigin_~person#1); 553115#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 558787#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 558788#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 558082#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 558083#L463-1 assume 2 == initPersonOnFloor_~floor#1; 559393#L464-2 assume !(0 == initPersonOnFloor_~person#1); 559394#L467-2 assume !(1 == initPersonOnFloor_~person#1); 559648#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 558548#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 562421#L201-2 assume !(0 == callOnFloor_~floorID#1); 562420#L204-2 assume !(1 == callOnFloor_~floorID#1); 562419#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 559685#L213-5 assume { :end_inline_callOnFloor } true; 556581#L553-1 assume { :end_inline_initPersonOnFloor } true; 556582#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 556808#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 556809#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 554580#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 554581#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 554527#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 554528#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 555680#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 562377#L1942 assume !(0 != timeShift_~tmp___9~2#1); 561263#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 553408#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 553409#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 555856#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 560007#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 560147#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 560486#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 553577#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 553578#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 556005#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 561697#L1730 assume !(1 == ~currentHeading~0); 560795#L1740 assume !(0 == ~currentFloorID~0); 560585#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 560586#L1746-1 assume { :end_inline_continueInDirection } true; 554980#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 555346#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 555347#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 557100#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 559752#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 553893#L2315-2 [2021-12-21 22:24:16,532 INFO L793 eck$LassoCheckResult]: Loop: 553893#L2315-2 assume !false; 553894#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 560066#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 560067#L2324-2 assume !false; 562121#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 560471#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 553893#L2315-2 [2021-12-21 22:24:16,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:16,532 INFO L85 PathProgramCache]: Analyzing trace with hash -613336580, now seen corresponding path program 1 times [2021-12-21 22:24:16,533 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:16,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1465710640] [2021-12-21 22:24:16,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:16,533 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:16,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:16,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:16,577 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:16,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1465710640] [2021-12-21 22:24:16,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1465710640] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:16,577 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:16,577 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 22:24:16,578 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1147095840] [2021-12-21 22:24:16,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:16,578 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:16,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:16,579 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 9 times [2021-12-21 22:24:16,579 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:16,579 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [716252094] [2021-12-21 22:24:16,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:16,579 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:16,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:16,582 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:16,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:16,585 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:16,601 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:16,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:24:16,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:24:16,601 INFO L87 Difference]: Start difference. First operand 9452 states and 17586 transitions. cyclomatic complexity: 8169 Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 2 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:17,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:17,125 INFO L93 Difference]: Finished difference Result 17654 states and 32745 transitions. [2021-12-21 22:24:17,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 22:24:17,126 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17654 states and 32745 transitions. [2021-12-21 22:24:17,179 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4686 [2021-12-21 22:24:17,218 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17654 states to 17654 states and 32745 transitions. [2021-12-21 22:24:17,219 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17580 [2021-12-21 22:24:17,227 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17580 [2021-12-21 22:24:17,227 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17654 states and 32745 transitions. [2021-12-21 22:24:17,229 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:17,229 INFO L681 BuchiCegarLoop]: Abstraction has 17654 states and 32745 transitions. [2021-12-21 22:24:17,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17654 states and 32745 transitions. [2021-12-21 22:24:17,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17654 to 17652. [2021-12-21 22:24:17,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17652 states, 17652 states have (on average 1.8549172898255155) internal successors, (32743), 17651 states have internal predecessors, (32743), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:17,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17652 states to 17652 states and 32743 transitions. [2021-12-21 22:24:17,537 INFO L704 BuchiCegarLoop]: Abstraction has 17652 states and 32743 transitions. [2021-12-21 22:24:17,537 INFO L587 BuchiCegarLoop]: Abstraction has 17652 states and 32743 transitions. [2021-12-21 22:24:17,537 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-21 22:24:17,537 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17652 states and 32743 transitions. [2021-12-21 22:24:17,572 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4686 [2021-12-21 22:24:17,572 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:17,572 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:17,573 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:17,573 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:17,573 INFO L791 eck$LassoCheckResult]: Stem: 589459#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 587450#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 587451#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 589710#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 580330#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 580331#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 589471#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 583888#L783 assume !(0 == getOrigin_~person#1); 583889#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 586818#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 586819#L409 assume !(0 == initPersonOnFloor_~floor#1); 581316#L436 assume !(1 == initPersonOnFloor_~floor#1); 581317#L463 assume !(2 == initPersonOnFloor_~floor#1); 582490#L490 assume 3 == initPersonOnFloor_~floor#1; 582491#L491 assume !(0 == initPersonOnFloor_~person#1); 584237#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 581165#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 582497#L201 assume !(0 == callOnFloor_~floorID#1); 585075#L204 assume !(1 == callOnFloor_~floorID#1); 582333#L207 assume !(2 == callOnFloor_~floorID#1); 582334#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 583038#L213-2 assume { :end_inline_callOnFloor } true; 585098#L553 assume { :end_inline_initPersonOnFloor } true; 583453#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 583454#L783-1 assume !(0 == getOrigin_~person#1); 580226#L787-1 assume !(1 == getOrigin_~person#1); 580227#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 585948#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 585949#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 585225#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 585226#L463-1 assume 2 == initPersonOnFloor_~floor#1; 586563#L464-2 assume !(0 == initPersonOnFloor_~person#1); 586564#L467-2 assume !(1 == initPersonOnFloor_~person#1); 586824#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 585707#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 589816#L201-2 assume !(0 == callOnFloor_~floorID#1); 589815#L204-2 assume !(1 == callOnFloor_~floorID#1); 589814#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 586865#L213-5 assume { :end_inline_callOnFloor } true; 583702#L553-1 assume { :end_inline_initPersonOnFloor } true; 583703#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 583930#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 583931#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 581690#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 581691#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 581637#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 581638#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 582800#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 589763#L1942 assume !(0 != timeShift_~tmp___9~2#1); 588522#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 580518#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 580519#L1695 assume !(0 != ~floorButtons_0~0); 588985#L1699 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 582976#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 587203#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 587351#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 587709#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 580686#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 580687#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 583127#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 588987#L1730 assume !(1 == ~currentHeading~0); 588032#L1740 assume !(0 == ~currentFloorID~0); 587813#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 587814#L1746-1 assume { :end_inline_continueInDirection } true; 582094#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 582462#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 582463#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 584229#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 586932#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 581003#L2315-2 [2021-12-21 22:24:17,573 INFO L793 eck$LassoCheckResult]: Loop: 581003#L2315-2 assume !false; 581004#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 587268#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 587269#L2324-2 assume !false; 589460#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 587693#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 581003#L2315-2 [2021-12-21 22:24:17,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:17,574 INFO L85 PathProgramCache]: Analyzing trace with hash 1052748502, now seen corresponding path program 1 times [2021-12-21 22:24:17,574 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:17,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326960483] [2021-12-21 22:24:17,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:17,574 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:17,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:17,605 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:17,605 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:17,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326960483] [2021-12-21 22:24:17,605 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326960483] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:17,606 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:17,606 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 22:24:17,606 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557097005] [2021-12-21 22:24:17,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:17,606 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:17,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:17,607 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 10 times [2021-12-21 22:24:17,607 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:17,607 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638515909] [2021-12-21 22:24:17,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:17,607 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:17,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:17,610 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:17,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:17,613 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:17,633 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:17,634 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:24:17,634 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:24:17,634 INFO L87 Difference]: Start difference. First operand 17652 states and 32743 transitions. cyclomatic complexity: 15160 Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:18,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:18,179 INFO L93 Difference]: Finished difference Result 33960 states and 62807 transitions. [2021-12-21 22:24:18,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 22:24:18,180 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33960 states and 62807 transitions. [2021-12-21 22:24:18,302 INFO L131 ngComponentsAnalysis]: Automaton has 129 accepting balls. 9276 [2021-12-21 22:24:18,394 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33960 states to 33960 states and 62807 transitions. [2021-12-21 22:24:18,394 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33818 [2021-12-21 22:24:18,418 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33818 [2021-12-21 22:24:18,418 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33960 states and 62807 transitions. [2021-12-21 22:24:18,419 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:18,419 INFO L681 BuchiCegarLoop]: Abstraction has 33960 states and 62807 transitions. [2021-12-21 22:24:18,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33960 states and 62807 transitions. [2021-12-21 22:24:18,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33960 to 33956. [2021-12-21 22:24:18,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33956 states, 33956 states have (on average 1.8495405819295558) internal successors, (62803), 33955 states have internal predecessors, (62803), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:18,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33956 states to 33956 states and 62803 transitions. [2021-12-21 22:24:18,983 INFO L704 BuchiCegarLoop]: Abstraction has 33956 states and 62803 transitions. [2021-12-21 22:24:18,983 INFO L587 BuchiCegarLoop]: Abstraction has 33956 states and 62803 transitions. [2021-12-21 22:24:18,983 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-21 22:24:18,983 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33956 states and 62803 transitions. [2021-12-21 22:24:19,065 INFO L131 ngComponentsAnalysis]: Automaton has 129 accepting balls. 9276 [2021-12-21 22:24:19,065 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:19,065 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:19,066 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:19,066 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:19,066 INFO L791 eck$LassoCheckResult]: Stem: 641160#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 639121#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 639122#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 641430#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 631948#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 631949#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 641169#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 635519#L783 assume !(0 == getOrigin_~person#1); 635520#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 638489#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 638490#L409 assume !(0 == initPersonOnFloor_~floor#1); 632933#L436 assume !(1 == initPersonOnFloor_~floor#1); 632934#L463 assume !(2 == initPersonOnFloor_~floor#1); 634106#L490 assume 3 == initPersonOnFloor_~floor#1; 634107#L491 assume !(0 == initPersonOnFloor_~person#1); 635868#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 632783#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 634112#L201 assume !(0 == callOnFloor_~floorID#1); 636724#L204 assume !(1 == callOnFloor_~floorID#1); 633951#L207 assume !(2 == callOnFloor_~floorID#1); 633952#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 634659#L213-2 assume { :end_inline_callOnFloor } true; 636748#L553 assume { :end_inline_initPersonOnFloor } true; 635075#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 635076#L783-1 assume !(0 == getOrigin_~person#1); 631844#L787-1 assume !(1 == getOrigin_~person#1); 631845#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 637599#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 637600#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 636877#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 636878#L463-1 assume 2 == initPersonOnFloor_~floor#1; 638229#L464-2 assume !(0 == initPersonOnFloor_~person#1); 638230#L467-2 assume !(1 == initPersonOnFloor_~person#1); 638495#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 637356#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 638021#L201-2 assume !(0 == callOnFloor_~floorID#1); 641534#L204-2 assume !(1 == callOnFloor_~floorID#1); 641533#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 638533#L213-5 assume { :end_inline_callOnFloor } true; 635332#L553-1 assume { :end_inline_initPersonOnFloor } true; 635333#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 635561#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 635562#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 633310#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 633311#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 633255#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 633256#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 634418#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 641481#L1942 assume !(0 != timeShift_~tmp___9~2#1); 640205#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 632135#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 632136#L1695 assume !(0 != ~floorButtons_0~0); 640674#L1699 assume !(0 != ~floorButtons_1~0); 640675#L1703 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 634596#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 638873#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 639020#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 639379#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 632304#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 632305#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 634748#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 640676#L1730 assume !(1 == ~currentHeading~0); 639710#L1740 assume !(0 == ~currentFloorID~0); 639484#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 639485#L1746-1 assume { :end_inline_continueInDirection } true; 633711#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 634080#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 634081#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 635859#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 638602#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 632621#L2315-2 [2021-12-21 22:24:19,067 INFO L793 eck$LassoCheckResult]: Loop: 632621#L2315-2 assume !false; 632622#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 638934#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 638935#L2324-2 assume !false; 641161#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 639361#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 632621#L2315-2 [2021-12-21 22:24:19,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:19,067 INFO L85 PathProgramCache]: Analyzing trace with hash -661607615, now seen corresponding path program 1 times [2021-12-21 22:24:19,067 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:19,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167021869] [2021-12-21 22:24:19,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:19,068 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:19,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:19,102 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:19,102 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:19,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167021869] [2021-12-21 22:24:19,102 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167021869] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:19,102 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:19,103 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 22:24:19,103 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956607361] [2021-12-21 22:24:19,103 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:19,103 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:19,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:19,104 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 11 times [2021-12-21 22:24:19,104 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:19,104 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [892712322] [2021-12-21 22:24:19,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:19,104 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:19,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:19,109 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:19,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:19,112 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:19,126 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:19,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:24:19,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:24:19,127 INFO L87 Difference]: Start difference. First operand 33956 states and 62803 transitions. cyclomatic complexity: 28984 Second operand has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 2 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:20,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:20,018 INFO L93 Difference]: Finished difference Result 66364 states and 122378 transitions. [2021-12-21 22:24:20,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 22:24:20,019 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66364 states and 122378 transitions. [2021-12-21 22:24:20,253 INFO L131 ngComponentsAnalysis]: Automaton has 257 accepting balls. 18402 [2021-12-21 22:24:20,429 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66364 states to 66364 states and 122378 transitions. [2021-12-21 22:24:20,429 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66090 [2021-12-21 22:24:20,472 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66090 [2021-12-21 22:24:20,472 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66364 states and 122378 transitions. [2021-12-21 22:24:20,473 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:20,473 INFO L681 BuchiCegarLoop]: Abstraction has 66364 states and 122378 transitions. [2021-12-21 22:24:20,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66364 states and 122378 transitions. [2021-12-21 22:24:21,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66364 to 66356. [2021-12-21 22:24:21,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66356 states, 66356 states have (on average 1.844143709687142) internal successors, (122370), 66355 states have internal predecessors, (122370), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:21,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66356 states to 66356 states and 122370 transitions. [2021-12-21 22:24:21,461 INFO L704 BuchiCegarLoop]: Abstraction has 66356 states and 122370 transitions. [2021-12-21 22:24:21,461 INFO L587 BuchiCegarLoop]: Abstraction has 66356 states and 122370 transitions. [2021-12-21 22:24:21,461 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-21 22:24:21,461 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66356 states and 122370 transitions. [2021-12-21 22:24:21,660 INFO L131 ngComponentsAnalysis]: Automaton has 257 accepting balls. 18402 [2021-12-21 22:24:21,661 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:21,661 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:21,661 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:21,661 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:21,662 INFO L791 eck$LassoCheckResult]: Stem: 741672#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 739501#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 739502#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 741961#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 732274#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 732275#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 741681#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 735845#L783 assume !(0 == getOrigin_~person#1); 735846#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 738843#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 738844#L409 assume !(0 == initPersonOnFloor_~floor#1); 733259#L436 assume !(1 == initPersonOnFloor_~floor#1); 733260#L463 assume !(2 == initPersonOnFloor_~floor#1); 734430#L490 assume 3 == initPersonOnFloor_~floor#1; 734431#L491 assume !(0 == initPersonOnFloor_~person#1); 736200#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 733106#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 734436#L201 assume !(0 == callOnFloor_~floorID#1); 737049#L204 assume !(1 == callOnFloor_~floorID#1); 734274#L207 assume !(2 == callOnFloor_~floorID#1); 734275#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 734982#L213-2 assume { :end_inline_callOnFloor } true; 737075#L553 assume { :end_inline_initPersonOnFloor } true; 735402#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 735403#L783-1 assume !(0 == getOrigin_~person#1); 732170#L787-1 assume !(1 == getOrigin_~person#1); 732171#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 737931#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 737932#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 737204#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 737205#L463-1 assume 2 == initPersonOnFloor_~floor#1; 738582#L464-2 assume !(0 == initPersonOnFloor_~person#1); 738583#L467-2 assume !(1 == initPersonOnFloor_~person#1); 738849#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 737688#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 738366#L201-2 assume !(0 == callOnFloor_~floorID#1); 742110#L204-2 assume !(1 == callOnFloor_~floorID#1); 742109#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 738889#L213-5 assume { :end_inline_callOnFloor } true; 735656#L553-1 assume { :end_inline_initPersonOnFloor } true; 735657#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 735887#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 735888#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 733633#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 733634#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 733580#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 733581#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 734742#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 742037#L1942 assume !(0 != timeShift_~tmp___9~2#1); 740648#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 732461#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 732462#L1695 assume !(0 != ~floorButtons_0~0); 741147#L1699 assume !(0 != ~floorButtons_1~0); 741148#L1703 assume !(0 != ~floorButtons_2~0); 734919#L1707 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 734920#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 739237#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 739395#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 739769#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 732629#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 732630#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 735073#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 741149#L1730 assume !(1 == ~currentHeading~0); 740118#L1740 assume !(0 == ~currentFloorID~0); 739880#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 739881#L1746-1 assume { :end_inline_continueInDirection } true; 735219#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 747117#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 747118#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 747121#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 750750#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 750751#L2315-2 [2021-12-21 22:24:21,662 INFO L793 eck$LassoCheckResult]: Loop: 750751#L2315-2 assume !false; 750754#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 750755#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 750763#L2324-2 assume !false; 750760#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 750757#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 750751#L2315-2 [2021-12-21 22:24:21,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:21,663 INFO L85 PathProgramCache]: Analyzing trace with hash 204541499, now seen corresponding path program 1 times [2021-12-21 22:24:21,663 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:21,663 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272740269] [2021-12-21 22:24:21,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:21,663 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:21,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:21,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:21,697 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:21,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272740269] [2021-12-21 22:24:21,698 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272740269] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:21,698 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:21,698 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 22:24:21,698 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084740630] [2021-12-21 22:24:21,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:21,699 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:21,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:21,700 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 12 times [2021-12-21 22:24:21,701 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:21,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354848801] [2021-12-21 22:24:21,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:21,702 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:21,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:21,706 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:21,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:21,709 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:21,725 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:21,726 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:24:21,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:24:21,728 INFO L87 Difference]: Start difference. First operand 66356 states and 122370 transitions. cyclomatic complexity: 56287 Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 2 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:23,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:23,081 INFO L93 Difference]: Finished difference Result 130740 states and 240369 transitions. [2021-12-21 22:24:23,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 22:24:23,082 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130740 states and 240369 transitions. [2021-12-21 22:24:24,049 INFO L131 ngComponentsAnalysis]: Automaton has 513 accepting balls. 36536 [2021-12-21 22:24:24,500 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130740 states to 130740 states and 240369 transitions. [2021-12-21 22:24:24,500 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130210 [2021-12-21 22:24:24,606 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130210 [2021-12-21 22:24:24,607 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130740 states and 240369 transitions. [2021-12-21 22:24:24,608 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2021-12-21 22:24:24,608 INFO L681 BuchiCegarLoop]: Abstraction has 130740 states and 240369 transitions. [2021-12-21 22:24:24,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130740 states and 240369 transitions. [2021-12-21 22:24:25,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130740 to 130724. [2021-12-21 22:24:25,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130724 states, 130724 states have (on average 1.8386294789021145) internal successors, (240353), 130723 states have internal predecessors, (240353), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:26,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130724 states to 130724 states and 240353 transitions. [2021-12-21 22:24:26,655 INFO L704 BuchiCegarLoop]: Abstraction has 130724 states and 240353 transitions. [2021-12-21 22:24:26,655 INFO L587 BuchiCegarLoop]: Abstraction has 130724 states and 240353 transitions. [2021-12-21 22:24:26,655 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-21 22:24:26,655 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130724 states and 240353 transitions. [2021-12-21 22:24:27,023 INFO L131 ngComponentsAnalysis]: Automaton has 513 accepting balls. 36536 [2021-12-21 22:24:27,023 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:27,023 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:27,024 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:27,024 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2021-12-21 22:24:27,025 INFO L791 eck$LassoCheckResult]: Stem: 938981#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 936690#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 936691#L2963 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 939298#L2956 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 929375#L2971 main_#t~ret109#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 929376#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 938995#L2901 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 932966#L783 assume !(0 == getOrigin_~person#1); 932967#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 936018#L808 aliceCall_#t~ret98#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 936019#L409 assume !(0 == initPersonOnFloor_~floor#1); 930361#L436 assume !(1 == initPersonOnFloor_~floor#1); 930362#L463 assume !(2 == initPersonOnFloor_~floor#1); 931537#L490 assume 3 == initPersonOnFloor_~floor#1; 931538#L491 assume !(0 == initPersonOnFloor_~person#1); 933320#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 930208#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 931543#L201 assume !(0 == callOnFloor_~floorID#1); 934185#L204 assume !(1 == callOnFloor_~floorID#1); 931381#L207 assume !(2 == callOnFloor_~floorID#1); 931382#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 932096#L213-2 assume { :end_inline_callOnFloor } true; 934209#L553 assume { :end_inline_initPersonOnFloor } true; 932520#L2662 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 932521#L783-1 assume !(0 == getOrigin_~person#1); 929271#L787-1 assume !(1 == getOrigin_~person#1); 929272#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 935083#L808-1 angelinaCall_#t~ret99#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 935084#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 934340#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 934341#L463-1 assume 2 == initPersonOnFloor_~floor#1; 935748#L464-2 assume !(0 == initPersonOnFloor_~person#1); 935749#L467-2 assume !(1 == initPersonOnFloor_~person#1); 936024#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 934832#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 935524#L201-2 assume !(0 == callOnFloor_~floorID#1); 939494#L204-2 assume !(1 == callOnFloor_~floorID#1); 939493#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 936064#L213-5 assume { :end_inline_callOnFloor } true; 932778#L553-1 assume { :end_inline_initPersonOnFloor } true; 932779#L2673 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 933010#L1163 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 933011#L2408 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 930737#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 930738#L1111 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 930683#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 930684#L1149 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 931854#L1803 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 939394#L1942 assume !(0 != timeShift_~tmp___9~2#1); 937881#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 929562#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 929563#L1695 assume !(0 != ~floorButtons_0~0); 938423#L1699 assume !(0 != ~floorButtons_1~0); 938424#L1703 assume !(0 != ~floorButtons_2~0); 932034#L1707 assume !(0 != ~floorButtons_3~0); 932035#L1711 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~16#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 936417#L1716 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 936418#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 936584#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 936965#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 929733#L1637-2 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 929734#L1686 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 932188#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 938425#L1730 assume !(1 == ~currentHeading~0); 937326#L1740 assume !(0 == ~currentFloorID~0); 937078#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 937079#L1746-1 assume { :end_inline_continueInDirection } true; 932336#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 946693#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 946694#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 946706#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 953519#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 953520#L2315-2 [2021-12-21 22:24:27,025 INFO L793 eck$LassoCheckResult]: Loop: 953520#L2315-2 assume !false; 953523#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 953524#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 953531#L2324-2 assume !false; 953529#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 953528#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 953520#L2315-2 [2021-12-21 22:24:27,025 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:27,026 INFO L85 PathProgramCache]: Analyzing trace with hash -2126373752, now seen corresponding path program 1 times [2021-12-21 22:24:27,026 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:27,026 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101612633] [2021-12-21 22:24:27,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:27,026 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:27,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:27,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:27,072 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:27,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101612633] [2021-12-21 22:24:27,072 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101612633] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:27,072 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:27,073 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 22:24:27,073 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379848231] [2021-12-21 22:24:27,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:27,073 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:27,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:27,074 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 13 times [2021-12-21 22:24:27,074 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:27,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1072656872] [2021-12-21 22:24:27,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:27,074 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:27,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:27,078 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:27,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:27,080 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:27,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:27,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 22:24:27,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 22:24:27,096 INFO L87 Difference]: Start difference. First operand 130724 states and 240353 transitions. cyclomatic complexity: 110174 Second operand has 5 states, 5 states have (on average 14.4) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:30,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:30,421 INFO L93 Difference]: Finished difference Result 472077 states and 861839 transitions. [2021-12-21 22:24:30,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 22:24:30,422 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 472077 states and 861839 transitions.